How to restrict HubSpot access to specific IP addresses using Conditional Access

**Executive summary:** This guide explains how to restrict HubSpot access to approved IP addresses using Microsoft Entra ID Conditional Access and Named Locations, detailing prerequisites (licenses, HubSpot SSO/Require SSO, static IPs, break-glass account), step-by-step creation of named locations and a block policy (validate in report-only mode first), validation using sign-in logs and the What If tool, and considerations and FAQs to prevent bypass and administrative lockout.