ZTCA Configuration: Restrict Atlassian Cloud sign-ins to trusted IPs using Entra Conditional Access

This guide describes how to implement IP-based access restrictions for Atlassian Cloud by creating Named Locations in Microsoft Entra ID and a Conditional Access policy that blocks sign-ins from untrusted IPs. It includes step-by-step instructions (create named location, build and test the CA policy, enable it), important limitations—most notably that SSO must be enforced for Conditional Access to apply and that API tokens/sessions are not covered—and recommendations to combine these controls with SSO enforcement, API/token governance, MFA, and other Zero Trust measures.