How to restrict Syncro access to specific IP addresses using Condition Access

**Executive summary:** This technical guide describes how to enforce IP-based access controls for Syncro via Microsoft Entra ID Conditional Access by creating Named Locations for trusted IPs, a blocking policy for non-trusted locations (report-only validation and then enforcement), and a separate MFA-enforcing policy for the Syncro Service Account used with Microsoft CSP/GDAP.