Can we restrict user logins via HTML5 webclient based on IP address and specific user (or group)?

I have some users that should only login from certain IP addresses but others have free access. We're using RDS HTML5 webclient and the client connections are not from domain joined machines.