Enabling Okta for employees only through OpenID Connect Authentication Plugin

Our IT team is wanting to enable 2FA through Okta for employees only and I was looking to enable this through the OpenID Connect Authentication Plugin. Before I go through the steps to install the plugin, is there a way to target a specific category of users, like all users labeled as Employees?