How to restrict Salesforce access to specific IP addresses using Conditional Access

This guide provides step-by-step instructions to restrict Salesforce access to approved IP addresses by configuring Named Locations and Conditional Access policies in Microsoft Entra ID. It covers prerequisites (licenses, SSO configuration, static IPs, break-glass accounts), creating Named Locations, building a block policy for Salesforce (with exclusions), validating in report-only mode, and safely enabling the policy while recommending pairing with MFA and Salesforce native IP restrictions.