I am looking to limit logins to our tenant (exchange, SharePoint etc) to only company or registered personal devices.
What is the best way to achieve this? For computers I've restricted access to Azure AD joined/registered, but I can't find how to achieve something similar to AD registered (non-MDM) on mobile.