Securing Office 365 with APM as IdP

I'm evaluating using APM as a SAML identity provider for Office 365, but I'm struggling to find ways to effectively secure access as per my specification.   Windows/ Mac OS, only permit corporate ...