I know that AA 6.x supports ADFS for SSO but that's not the request. Please read also the following documentation from Microsoft regarding Azure Conditional Access: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-controls#custom-controls-1