Non company tenancy block

Question

We are looking for options to bock access to tenancies other than our our tenancy from our corporate managed devices. This is primarily for DLP purposes (e.g. An external vendor on one of our corporate devices may be able to access data on our tenancy and log into their companies tenancy and exfil data) . Can anyone please advise what native Microsoft options are available to achieve this? Also if anyone can share the pros and cons of doing this and any real world examples? TIA

Answer 1

If you want to outright block access to other tenants, use the Tenant restrictions feature: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/tenant-restrictions

Alternatively you protect your data via sensitivity labels/IRM, so even if someone manages to exfil it, it will be inaccessible.