Application access without OTP for allowed IPs in created policy

Zero Trust
1

Related to

Access

What is the issue you’re encountering

I would like to disable OTP for allowed IPs in Policy created for accessing the self-hosted app via Access.

What steps have you taken to resolve the issue?

Could not find an option to disable that and hence would like to know if this is possible.

What are the steps to reproduce the issue?

Create an application via Zero Trust → Access → Applications and create a policy to allow access to an application via the specified IP. Now, I would like to disable OTP when accessing the URL to the app using the specified IP.

2

I deleted the OTP authentication method but then it breaks accessibility to the application. Seems like atleast one auth provider needs to be enabled for security reasons.

USECASE: When I am connected to my home network, I would not want to provide an OTP every single time to access the application which is annoying. But I know that this is the security best practise.

3

I’d like a similar thing - if a client has a valid client certificate - they should bypass the OTP