Integrate Cloudflare Area 1 with Access for SaaS
is an email security platform that protects your organization’s inbox from phishing, spam, and other malicious messages. You can set up Cloudflare Access as a single sign-on provider for your Cloudflare Area 1 portal.
Time to complete:
- Admin access to your Area 1 account
- Your user’s email in Area 1 matches their email in Zero Trust.
1. Add Area 1 to the Zero Trust dashboard
Select Add an application.
In the Application field, enter
Area 1and select Area 1. (Area 1 is not currently listed in the default drop-down menu.)
Enter the following values for your application configuration:
Assertion Consumer Service URL
Name ID Format
Choose the Identity providers you want to enable for your application.
Turn on Instant Auth if you are selecting only one login method for your application, and would like your end users to skip the identity provider selection step.
2. Add an Access policy
3. Configure SSO for Area 1
Finally, you will need to configure Area 1 to allow users to log in through Cloudflare Access.
Turn on Single Sign On.
(Optional) To require users to sign in through Access, set SSO Enforcement to All. When SSO is enforced, users will no longer be able to sign in with their Area 1 credentials.
In SAML SSO Domain, enter
Get your Metadata XML file:
In the Zero Trust dashboard, copy the SSO Endpoint for your application.
In a new browser tab, paste the SSO Endpoint and append
/saml-metadatato the end of the URL. For example,
Copy the resulting metadata.
Return to the Area 1 portal and paste the metadata into Metadata XML.
Select Update Settings.
In the Zero Trust dashboard, select Done.
Your application will appear on the Applications page. If you added the application to your App Launcher, you can test the integration by going to