Perhaps what is outlined in this blog will assist your request: https://cloudtekki.com/post/tunnel-o365-conditional-access/
