At this point he IP restrictions runs before there is even a login, the idea is to block the entire app and not even show a login screen.
I think the only way we will ultimately be able to do this will be with more advanced “Login Rules” which will work similar to record rules but for the login form. This is not on the immediate roadmap though.