IP Whitelist for Two Factor Authentication

As a web-hosting provider, I would like the ability to whitelist IP addresses from Two Factor Authentication so that our tech support department can easily support clients without having to setup Google Authenticator or other apps on their cell phones.

Many clients are starting to enable 2FA and while it is possible to SSH in and get the 2FA key, it has become a nightmare from the support side of things as 2FA will log our tech out if the client logs in at the same time.

The ability to selective add IPs to a white list that bypasses 2FA would ensure that server has the protection of 2FA from the outside world, but the techs within the datacenter can provide the support level we hold ourselves too.