We have a third party cloud based application that out company is using. We are federated with them using ADFS, but we are looking at using Azure AD for authentication shortly. However, this third party also allows users to create their own accounts. What we would like to do is block non-work related account from logging on to the service on work computers. Mainly to prevent data leakage.... yes i know Azure IP is the best way to do this... yes i know that they could just logon via another non-work computer and access the service. Yes, i know if i did SSL inspection i could do this (but i dont want to do that) ... But even if there was a way to see this when this happens that is not via a work account that would be good.... Hope it makes sense? looking for any ideas or guidance... thanks
