Scenario:
Local AD Domain, with AD FS 2.0 configured and federation with Office 365 all set up.
Looking to add the new 2FA option, but only when a laptop user is out of the office.
As per this article:
http://community.office365.com/en-us/wikis/sso/294.aspx
What is the experience of a user who has a domain-joined laptop, but is external to the LAN and connecting to O365 via the internet?