Cloudflare Docs
Cloudflare Zero Trust
Visit Cloudflare Zero Trust on GitHub
Set theme to dark (⇧+D)

Cloudflare dashboard SSO application

By adding a Dashboard SSO application to your Cloudflare Zero Trust account, you can enforce single sign-on (SSO) to the Cloudflare dashboard with the identity provider (IdP) of your choice.

Once you have configured SSO, every user that wants to login with Dashboard SSO will need to exist as a member in your Cloudflare account and IdP. If there is no Cloudflare member account for this user, the request will not forward the authentication phase to the IdP. Refer to Managing Cloudflare account access for information on adding users to your Cloudflare account.

​​ Set up dashboard SSO

​​ Step 1 — Launch Cloudflare Zero Trust

To log in to Cloudflare Zero Trust directly, go to the Zero Trust dashboard and select your account.

To log in through the Cloudflare dashboard:

  1. Log in to the Cloudflare dashboard.
  2. Log in to the Zero Trust dashboard.

​​ Step 2 — Set up an IdP

Configure an IdP following our detailed instructions.

Once you configure your IdP, make sure you also test your IdP.

​​ Step 3 — Contact your account team

Ask your account team to approve and create your SSO domain. The SSO domain can be configured for multiple email domains associated with the members in your Cloudflare account. For example, if your SSO domain is configured for emails ending in, a member with email would not see the Log in with SSO option and would have to enter their username and password.

​​ Step 4 — Test and enable your application

To test and enable your SSO application:

  1. Log in to the Zero Trust dashboard.

  2. Navigate to Settings > Authentication.

  3. In the Cloudflare dashboard SSO section, find your email domain.

  4. Set the toggle value to Enabled. This action can only be performed by Account Super Administrators.

  5. Do not log out or close your browser window. Instead, open a different browser or an incognito window.

  6. Navigate to the Cloudflare dashboard and log in with your email address from your SSO domain.

  7. If you can log in successfully, you have successfully set up your SSO application.

  8. If you cannot log in successfully:

    1. Return to the Zero Trust dashboard.
    2. For Cloudflare dashboard SSO, set your email domain to Disabled.
    3. Re-configure your IdP.