Alternative to TMG to block access to OWA in outside working hours.

Hello everyone,

I have a client who had a rule in ISA 2006 to block external access OWA outside of working hours for some users groups because of labor laws.
My client 2 months ago replaced the ISA by the Cisco ASA, in doing so he lost this restriction as before and asked for help to return to the OWA restriction after the schedule of work.
I wonder if Microsoft's solution ADFS and WAP Windows Sever 2012 R2 solve the problem of my client?

Any help will be appreciated