How to restrict GitHub Enterprise Cloud access to a specific IP address using Conditional Access

This is a step‑by‑step operational guide for restricting GitHub Enterprise Cloud access to specific IP addresses using Microsoft Entra ID Conditional Access and GitHub's native IP allow list; it covers prerequisites (licenses, SSO, known static IPs), creating Named Locations, building and validating a Conditional Access policy in report‑only mode, and safely enabling enforcement while excluding break‑glass accounts and service accounts.