9 of 9 users support this suggestion
myAPPs: Two-Factor Authentication only from external
I would suggest a option to enable Two-Factor Authentication only when someone tries to login via reverse proxy. For internal usage this is not realy nessesary.