How to restrict Snowflake access to a specific IP address using Conditional Access

This document is a how‑to guide for enforcing IP‑based access controls to Snowflake using Microsoft Entra ID Conditional Access (SAML SSO) alongside Snowflake Network Policies. It details prerequisites (licenses, SAML2 integration, removing local passwords, static IPs), creating Named Locations, building a policy to block sign‑ins outside trusted IPs, validating in report‑only mode, and cautions about non‑SSO connections (JDBC/ODBC/SnowSQL) which require Snowflake Network Policies for full coverage.