Cloudflare Docs

Cloudflare Zero Trust

Cloudflare Docs

Cloudflare Zero Trust

Overview
Get started
Tutorials
Identity
One-time PIN login
SSO integration
Generic SAML 2.0
SAML | Centrify
Azure AD®
SAML | OneLogin
SAML | Jumpcloud
SAML | Active Directory®
PingFederate®
PingOne®
PingOne® (SAML)
SAML | Citrix ADC
SAML | Signed AuthN requests
SAML | Keycloak
Generic OIDC
OneLogin OIDC
Centrify
Facebook
GitHub
Google
Google Workspace
LinkedIn
Okta
Okta (SAML)
Yandex
Device posture
WARP client checks
Application check
Carbon Black
Device serial numbers
Disk encryption
Domain joined
File check
Firewall
OS version
Require Gateway
Require WARP
SentinelOne
Service providers
CrowdStrike
Microsoft Endpoint Manager
Uptycs
Workspace ONE
Access integrations
Azure AD
Mutual TLS
Tanium
User management
Access groups
Session management
Seat management
Short-lived certificates
Service tokens
Login page
Authorization cookie
Validate JWTs
Application token
CORS
Connections
Cloudflare Tunnel
Get started
Set up a tunnel
Via the dashboard
Configuration
Via the command line
Configuration
Configuration file
Ingress rules
Cloudflared parameters
Run a tunnel
Run as a service
Linux
macOS
Windows
Useful commands
Tunnel availability and failover
Tunnel permissions
Useful terms
Downloads
GitHub
Tunnel use cases
SSH
RDP
SMB
Private networks
Connect private networks
Create private networks
Private hostnames and IPs
Tunnel Virtual Networks
Public hostnames
DNS record
Load balancers
Tunnel administration
Ansible
AWS
Azure
GCP
Kubernetes
Terraform
Tunnel monitoring
Notifications
Do more with Tunnel
Secure the server
Ports and IPs
Migrate legacy tunnels
Quick Tunnels
Tunnel hosting requirements
Grafana Dashboard for Tunnels
License
Copyrights
Connect devices
WARP
First-time setup
Download WARP
User-side certificates
Install the Cloudflare certificate
Deploy a custom certificate
Deploy WARP
Managed deployment
Partners
Hexnode
Intune
Jamf
JumpCloud
Kandji
Parameters
Manual deployment
WARP with firewall
WARP with legacy VPN
Configure WARP
Device profiles
WARP settings
Managed networks
Route traffic
Local Domain Fallback
Split Tunnels
Known limitations
Remove WARP
Agentless options
DNS
Add locations
DNS resolver IPs and hostnames
DNS over HTTPS
DNS over TLS
HTTP
Magic WAN
Applications
Add web applications
SaaS applications
Self-hosted applications
Cloudflare dashboard SSO application
Add non-HTTP applications
Arbitrary TCP
Scan SaaS applications
Manage findings
Available integrations
Box
GitHub
Google Workspace
Microsoft 365
Salesforce
Slack
Add bookmarks
App Launcher
Policies
Secure Web Gateway
Get started
DNS filtering
Network filtering
HTTP filtering
DNS policies
Common policies
Test DNS filtering
Scheduled DNS policies
Network policies
Common policies
SSH proxy and command logs
HTTP policies
Common policies
Global rules
HTTP/3
TLS decryption
Tenant control
AV scanning
Egress policies
Dedicated egress IPs
Applications and app types
Domain categories
Identity-based policies
Block page
Order of enforcement
WARP session duration
Lists
Access
Manage Access policies
Require Purpose Justification
External Evaluation rules
Application paths
Enforce MFA
Temporary authentication
Browser Isolation
Setup
Clientless Web Isolation
Non-identity on-ramps
Isolation policies
Extensions
Accessibility
Browser Isolation with firewall
Known limitations
Data Loss Prevention
Get started
Predefined DLP Profiles
Build a custom profile
Profile settings
DLP logs
Log the payload of matched rules
Configuration tips
False positives
Google Drive
Analytics
Private Network Discovery
Shadow IT Discovery
Gateway Analytics
User logs
Zero Trust logs
Gateway activity logs
Manage PII
Access audit logs
Tunnel audit logs
Logpush integration
API and Terraform
Access API examples
Scoped API tokens
Terraform
Examples
Glossary
Account limits
Roles and permissions
FAQ

CASB integrations

You can integrate the following SaaS applications with Cloudflare CASB: