it's an Android, ip is not helpful it's region wide if it's a landline connection but if it's a mobile connection it's impossibile to determine where it is, we need gps coordinatesalso the only reported IP is primary adapter IP, if it's in Wifi it's ...
other MDM EMM implement this feature, at least it should be possible to have this only if I declare as stoken and the device is completly locked or some sort of privacy shield