Azure Active Directory (Azure AD) is a service that your business subscribes to.
You wish to establish a conditional access policy for Azure AD.
When connecting to Azure AD from untrusted places, members of the Global Administrators group must utilize Multi-Factor Authentication and a device that is connected to Azure AD.
Solution: To change the session control of the Azure AD conditional access policy, log in to the Azure portal.
Does the solution meet the goal?