ZTCA Configuration: Restrict Hudu access to trusted IPs using Entra Conditional Access and native IP controls

This guide explains how to restrict access to a Hudu instance by IP address using two complementary controls: Entra ID Conditional Access (to block SSO sign-ins outside trusted IPs for non-admin users) and Hudu's native IP Access Control (to block all access including admin, API, and password logins). It provides step-by-step configuration, validation steps, important caveats about admin bypass and dynamic IPs, and recommends combining IP restrictions with MFA and least-privilege controls.