Controlling Office 365 access using tenant restrictions on ProxySG or Advanced Secure Gateway.