Allow listing is a security technique that allows only specific IP addresses or domains to access a network or a service. By adding the office IP address as an exception, the company can prevent two- factor authentication from being triggered when users are connected to the office Wi-Fi, since the office network is considered trusted. This way, users will only be prompted for two- factor authentication when working outside of the office, which enhances security.