Hi Robertson,
After posting the query, I could find the App Policy that you have mentioned. But I am yet to explore further and unable to find on how to create authentication profile.
Our requirement is that we want to block access Exchange Online, SharePoint Online (and other services) for certain users, when they access Office 365 apps from outside the on premise network.
It would be helpful, if you can share information about restrictions that can be configured in detail.
Regards,
Ganesan