Thank you, @Randheer Singh, for your reply.

The issue we have is that the 3rd party contacts will not pass the IP filter in order to attempt a login, and therefore I assume it will not reach the post-authentication context policy.

I assume this is not the first time for this scenario for the TPRM third party portal. 

Any advice or suggestions? Or can you check with others?

Thanks again, Dan