• Go to Entra Admin Center.
• Navigate to Applications → Enterprise applications.
• Select the application.
• Check Conditional Access policies that apply to the app.
• Create or verify a policy:
  • Assignments → Users/groups.
  • Target resources → Select the enterprise app.
  • Grant → Require multifactor authentication.
  • Enable the policy.