Conditional access typically requires a premium licence from your identity provider. For example, with Microsoft, you'd need Azure AD Premium P1 or P2 or certain Microsoft 365 licences.