This app works best with JavaScript enabled.
Skip to content
Cloudflare docs logomark
Cloudflare
Docs
Cloudflare Cloudflare for Teams logo
Cloudflare for Teams
Navigation menu icon
Open external link
Cloudflare docs logomark
Cloudflare
Docs
Cloudflare Cloudflare for Teams logo
Cloudflare for Teams
Dropdown icon
Cloudflare for Teams menu
Blog: Introducing Cloudflare One
Cloudflare for Teams pricing
Cloudflare homepage
Overview
Get started
Tutorials
Collapse: Identity
Identity
One-time PIN login
Expand: SSO integration
SSO integration
SAML | Centrify
SAML | Okta
SAML | OneLogin
SAML | Jumpcloud
SAML | Active Directory®
SAML | PingIdentity®
SAML | Citrix ADC
SAML | Signed AuthN requests
SAML | Keycloak
Generic OIDC
OneLogin OIDC
Centrify
Facebook
GitHub
Google
Google Suite
LinkedIn
Microsoft Azure AD®
Okta
One-Time Pin Login
Yandex
Expand: Device posture
Device posture
Mutual TLS
Require Gateway
Azure AD
Carbon Black
SentinelOne
Tanium
CrowdStrike
Device serial numbers
Expand: User management
User management
Groups
Session management
Short-lived certificates
JSON web tokens
Collapse: Service auth
Service auth
Service tokens
Login page
Expand: Connections
Connections
Expand: Connect applications
Connect applications
Expand: Setup
Setup
Install cloudflared
Authenticate cloudflared
Create a Tunnel
Expand: Configure a Tunnel
Configure a Tunnel
Configuration file
Ports and IPs
Ingress rules
Expand: Route to a Tunnel
Route to a Tunnel
Kubernetes
DNS record
Load balancers
Expand: Run a Tunnel
Run a Tunnel
Deploy cloudflared replicas
Run as a service
Expand: License
License
Copyrights
TryCloudflare
Expand: Connect networks
Connect networks
Expand: Private networks
Private networks
Create a Tunnel
Expand: Locations
Locations
Add locations
Expand: Connect devices
Connect devices
Expand: WARP client
WARP client
Control proxy settings
Install the Cloudflare root certificate
Expand: Deployment
Deployment
Parameters
Windows
macOS
iOS
Android
WARP with Firewall
Device enrollment
Download WARP
Expand: Exclude network traffic from WARP
Exclude network traffic from WARP
Local Domain Fallback
Split Tunnels
Expand: Agentless options
Agentless options
DNS over HTTPS
DNS over TLS
Native OS
Router setup
Expand: Connect browsers
Connect browsers
Setup
Known limitations
Expand: Applications
Applications
Expand: Add web applications
Add web applications
SaaS applications
Self-hosted applications
Application paths
Add non-HTTP applications
App Launcher
Expand: Policies
Policies
Expand: Secure Web Gateway
Secure Web Gateway
Expand: DNS policies (New)
DNS policies (New)
DNS Categories
Expand: DNS policies
DNS policies
Policy management
Categories
SafeSearch
Expand: HTTP policies
HTTP policies
Global rules
Policy management
Order of enforcement
Applications and app types
AV scanning
Expand: Network policies
Network policies
Policy management
Block page
Applications changelog
Expand: Zero Trust
Zero Trust
Policy management
Common configurations
CORS
Application paths
Enforce MFA
Lists
Expand: API and Terraform
API and Terraform
Access API examples
Scoped API tokens
Terraform
Expand: Analytics
Analytics
Access overview
Gateway overview
User logs
Expand: Teams logs
Teams logs
Activity logs
User logs
Access Audit logs
Tunnel Audit logs
Glossary
Roles and permissions
Technical limitations
FAQ
Search icon (depiction of a magnifying glass)
GitHub icon
Visit Cloudflare for Teams on GitHub
Light theme icon (depiction of a sun)
Dark theme icon (depiction of a moon)
Set theme to dark (⇧+D)
Identity
Service auth
Service tokens