Conditional Access Policy
All Users – Auth Context Sensitive Data – Require Compliant Device
Users
Include: All Users
Exclude: Break glass account
Target Resources
Drop down to Authentication Context
Check the box next to the Authentication context policy that was created.
Grant
Grant Access
Require Authentication Strength
Select the strength
Select Require device to be marked as compliant