How to restrict Okta access to a specific IP address using Conditional Access

This guide provides step-by-step instructions to enforce IP-based access restrictions for Okta: Part A details creating Okta Network Zones and applying Admin Console, Global Session, and App Sign-On policies to block access outside trusted IP ranges; Part B describes using Microsoft Entra ID Named Locations and Conditional Access policies when Entra ID is the primary identity provider and Okta is an external authenticator. The document includes prerequisites, examples of CIDR formats, policy ordering tips, break-glass account guidance, validation recommendations (report-only testing and sign-in logs), FAQs, and warnings about the impact of misconfiguration.