Hi @Neil B · Thank you for reaching out.
This is not yet possible. As of now, best you can do is, require MFA for unknown devices by using the custom policy sample provided here: https://github.com/azure-ad-b2c/samples/tree/master/policies/mfa-unknown-devices
If you don't want to use custom policy, you may configure Identity Protection (requires B2C Premium P2 tier) and/or configure Conditional Access Policy to require MFA when there is low/medium/high sign-in risk is detected.
Read more:
- Change your Azure AD pricing tier
- Sign-in risk
- Identity Protection and Conditional Access for Azure AD B2C
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.