Conditional access policies can now be created with Azure Active Directory Premium to enforce multifactor authentication for users and groups trying to access specific applications. Trusted IP ranges can be excluded from the policy. With this release, you can enforce multifactor authentication only for access to federated applications.
For more information, please visit this
Active Directory Team Blog.