A company wants to automatically require multi-factor authentication when employees sign in from outside the corporate network, but allow seamless sign-in when they are in the office. The decision must be evaluated at sign-in time based on the user's location. Which Microsoft Entra ID feature should be used to enforce this?