How to restrict Slack access to a specific IP address using Conditional Access

**Executive summary:** This technical guide explains how to enforce IP-based access controls for Slack by configuring Named Locations and a Conditional Access policy in Microsoft Entra ID (Entra) when Slack is integrated via SAML SSO; it covers prerequisites, SSO enforcement modes, step-by-step creation of the Named Location and CA policy, validation in Report-only mode, enabling the policy, and operational notes such as guest exclusions and break-glass accounts.