Use Conditional Access to Restrict Microsoft Teams

Good question. As I mentioned in the blog post, once you go off network (roam from WiFi to cellular) you will still have access to the app for up to an hour until the next authentication refresh happens, at which point you will be challeged to authenticate and as Conditional Access kicks in - you'll be denied (see screenshots in blog post).