Need access outside the internal network to one drive for business for members of a group.

So right now we have an Exchange Online conditional access policy (covers everyone), allowing our in-network users to use the product without MFA, and requiring MFA for off-network access.   What w...