In December Microsoft relased an update to Intune that enables admins to set up Conditional Access to Exchange online and I am happy to see that they now also have relased the ConfigMgr Extension that enables ConfigMgr/Intune Hybrid customers to set this up aswell.
Read more about Conditional Access for Exchange with Intune here: Microsoft Intune Blog
With this extension, you will be able to restrict Exchange ActiveSync access to Exchange Online to only those users who have enrolled their devices for management. By requiring that only managed and compliant devices be allowed to synchronize email, organizations can provide an extra layer of data protection.
The Conditional Access extension will appear as a new item in the Extensions for Microsoft Intune node in the Configuration Manager console.
To install this extension, select this extension and then click Enable. For more information about extensions, see http://technet.microsoft.com/en-us/library/dn574730.aspx
For additional technical resources on Conditional Access, visit TechNet here.