Yes, you can control that using the manage authentication policy in your tenant. Follow these steps:

1. Manage Authentication Policy: Navigate to the manage authentication policy settings in your tenant. Edit the policy that you want to update.
2. Auth Policy Rule: Add a new row to the authentication policy ruleset for outside network access. In the "Access Restriction for Authentication Condition" column, create a new access restriction and include all allowed ESS and MSS-related security groups, then click OK. You will see that the new access restriction will be added to the new ruleset row. Now click OK to save your authentication policy changes.
3. Activate Authentication Policy Changes: To apply the new changes in the system, run the task "Activate All Pending Authentication Policy Changes."

Thanks,