IP Based Access Control Only For Native UI

[DebjitGhosh31]

Hi,

I have Azure single sign-on in place for our ServiceNow instance and deactivated /login.do (via disabling all local user passwords). But I want to restrict users from accessing the native UI of ServiceNow from IPs outside of organizations accepted range. I know we can achieve this via IP Address Access Control, but the issue is I want to keep the /sp page available to all users (even outside of accepted IP range if they can authenticate via SSO). I am not able to find any guide how I can achieve this kind of conditional access from ServiceNow. 

Any help on how to achieve this.

Regards,

Debjit

[Tyson3]

We have the same exact requirement.  I've heard this can be done with the ZeroTrust module, but this is a paid for module provided by ServiceNow.  Considering this is security related, you would think this might be something OOB without having to pay.  Anyone know of other solutions that can accomplish the same thing without having to purchase a product?