Restrict Box Access to a Specific IP Address Using Conditional Access

**Executive summary:** This guide explains how to restrict Box access to trusted IP addresses using Microsoft Entra ID Named Locations and Conditional Access policies, detailing prerequisites (licenses, SSO required, break‑glass account), step‑by‑step creation of the Named Location and blocking policy, validation in report‑only mode, and guidance for enabling the policy while avoiding user or admin lockouts.