You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/partner-cloudflare.md
+6-8Lines changed: 6 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,9 +34,7 @@ To get started, you'll need:
34
34
Cloudflare WAF integration includes the following components:
35
35
36
36
-**Azure AD B2C tenant** – The authorization server that verifies user credentials using the custom policies defined in the tenant. It's known as the identity provider
37
-
38
37
-[**Azure Front Door**](../frontdoor/front-door-overview.md) – Enables custom domains for Azure B2C tenant. Traffic from Cloudflare WAF is routed to Azure Front Door before arriving at Azure AD B2C tenant.
39
-
40
38
-**Cloudflare** – The web application firewall that manages traffic sent to the authorization server
41
39
42
40
## Integrate with Azure AD B2C
@@ -45,21 +43,21 @@ For custom domains in Azure AD B2C, use the custom domain feature in Azure Front
45
43
46
44
After a custom domain for Azure AD B2C is configured using Azure Front Door, [test the custom domain](./custom-domain.md?pivots=b2c-custom-policy#test-your-custom-domain) before proceeding.
47
45
48
-
## Onboard with Cloudflare
46
+
## Create a Cloudflare account
49
47
50
48
On cloudflare.com, you can [create an account](https://dash.cloudflare.com/sign-up). To enable WAF, on [Application Services]([https://www.cloudflare.com/plans/](https://www.cloudflare.com/plans/#price-matrix) select **Pro**, which is required.
51
49
52
50
### Configure DNS
53
51
54
52
1. To enable WAF for a domain, in the DNS console for the CNAME entry, turn on the proxy setting from the DNS console for the CNAME entry as shown.
55
53
56
-

54
+

57
55
58
56
2. Under the DNS pane, toggle the **Proxy status** option to **Proxied**. It turns orange.
59
57
60
58
The settings appear in the following image.
61
59
62
-

60
+

63
61
64
62
### Configure the Web Application Firewall
65
63
@@ -69,22 +67,22 @@ Go to your Cloudflare settings, and use the Cloudflare content to [configure the
69
67
70
68
In the top pane of the console, use the firewall option to add, update, or remove firewall rules. For example, the following firewall setting enables CAPTCHA for incoming requests to *contosobank.co.uk* domain before the request goes to Azure Front Door.
71
69
72
-

70
+

> Cloudflare has functionality to customize block pages. See, [Configuring Custom Pages (Error and Challenge)](https://support.cloudflare.com/hc/en-us/articles/200172706-Configuring-Custom-Pages-Error-and-Challenge-).
84
82
85
83
2. The Azure AD B2C policy sign-in dialog appears.
86
84
87
-

85
+

0 commit comments