Hopefully someone as an idea...
In Azure AD, how can we allow MFA setup by a user but only allow that configuration to occur on a trusted network? We have trusted networks defined but everything we have tried does not prevent MFA setup from outside those trusted networks.
For example, if I set MFA to Enabled, then how do we prevent the user from setting it up at home vs forcing setup from the office.
thanks