To enforce Zero Trust explicit subscription verification in Microsoft 365, focus on verifying users and devices before granting access, using Microsoft Entra ID for identity and access management and leveraging Conditional Access policies. This involves configuring authentication methods, managing device compliance, and enforcing access based on user roles and device health.
Reference:
https://www.microsoft.com/insidetrack/blog/implementing-a-zero-trust-security-model-at- microsoft/