portal.office.com的条件访问（portal.office365.com）

大家好，

我想知道是否可以创建条件访问策略来访问portal.office.com，office.com，portal.office365.com ......等等，没有在顶层启用2FA？ 

I'm wondering if it's possible to create a conditional access policy for accessing portal.office.com, office.com, portal.office365.com...etc, without enabling 2FA at the top level? 

我想这样做的原因是因为我们不喜欢由于当前用户平台运行不支持Modern Auth的旧版Skype / Lync，我们不想在顶部强制执行它，我们的安全策略不允许创建App
密码。  

The reason I want to do it this way is because we don't want to enforce it at the top due to the current user platform running an older version of Skype/Lync which doesn't support Modern Auth, and our security policies don't allow for the creation of App Passwords. 

我为其他应用程序（如Mimecast）创建了2FA的条件访问权限，但我看不到为办公室门户网站执行此操作的方法。 

I've created conditional access with 2FA for other apps like Mimecast, but I can't see a way to do it for the office portal. 

环境是与Azure同步的本地AD联合域。电子邮件目前在本地托管，但有计划在未来6个月内迁移到Office365。 

The environment is a local AD Federated domain sync'd to Azure. Email is currently hosted locally, but there is a plan to migrate to Office365 in the next 6 months. 

谢谢!!