Looking into implementing Geofencing / location based access

Hello fellow nerds!

I'm looking into implementing some form of geofence for our school district.  We have Entra P1 for all of our users.

So far I've been looking into building a conditional access policy to deny all cloud apps when condition=location is NOT United states.  
I have this applied in read-only mode but have not gotten any audit results back yet.

Does anyone else have a way to block sign-in attempts from countries outside of their residence?  Anyone else struggled through this so I don't have to reinvent the wheel?

I appreciate any feedback!