We have enabled Conditional Based Access on the "Microsoft Azure Management" application in Azure AD. We are using this to enforce .