If you use MS Authenticator you can enable geofencing for SSO. If it’s enabled then no other TOTP apps will work.