Require login from Zone

I would like to setup security so when devices are on a local network they do not require login but when connecting remotely a user login is required.
I’ve setup Zones and tested them however the levels must match option is either all or any. I’d like to set it to either (Authenticated and Remote) OR Onsite.

image

For more complex logic, you could create a new custom security level. In your IdP(s), you can create a rule which checks for the conditions you want using an expression.