Azure AD provides a hook for this through Conditional Access, which will block sign in to a application if your device isn’t compliant with security policies or

Azure AD provides a hook for this through Conditional Access, which will block sign in to a application if your device isn’t compliant with security policies or updates (or if you are logging in from an unapproved country).[0] Google provides something similar through Context-Aware Access but I don’t know if it goes as deep (Google used Puppet in the original paper to get device state info).[1] 0: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview https://docs.microsoft.com/en-us/azure/active-directory/cond... 1: https://support.google.com/a/answer/9275380?hl=en https://support.google.com/a/answer/9275380?hl=en