Force Access Policy Depending on User
I currently have a Vs for SharePoint with no Access Policy as it only deals with trusted domain joined clients. It does have a couple of iRules; one regarding NTLM (I think to facilitate single sign-on although I didn't build this) and the second assigns a pool based on the requested URL.
Our organisation has partner organisations and whilst their username UPN suffix is different we're all members of the same AD. For example I am me@org1.com and the partner organisation is them@org2.com.
A requirement has arisen now whereby the partner organisation wish to put 2FA in front of the SharePoint application but I don't want to do this for everyone in the AD.
Is it possible then to force some kind of policy/rule/profile that only kicks in when a user e.g. "ORG2\them" attempts to access SharePoint without forcing everyone to go through a log on process?