Skip to content

Commit 244e8dc

Browse files
committed
add IdP TF tab to implementation guide
1 parent dd24f61 commit 244e8dc

File tree

3 files changed

+30
-4
lines changed

3 files changed

+30
-4
lines changed
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
params:
3+
- verb
4+
---
5+
6+
If you do not see your identity provider listed, these providers can typically still be enabled. If they support OIDC or OAuth, {props.verb} the [generic OIDC](/cloudflare-one/identity/idp-integration/generic-oidc/) option. If they support SAML, {props.verb} the [generic SAML](/cloudflare-one/identity/idp-integration/generic-saml/) option. Cloudflare supports all SAML and OIDC providers and can integrate with the majority of OAuth providers. If your provider supports both SAML and OIDC, we recommend OIDC for ease of configuration.

src/content/partials/cloudflare-one/access/idp-integration.mdx

Lines changed: 22 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,16 +2,36 @@
22
{}
33
---
44

5+
import {Render, Tabs, TabItem} from "~/components"
6+
7+
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
8+
59
1. In [Zero Trust](https://one.dash.cloudflare.com), go to **Settings** > **Authentication**.
610

711
2. In the **Login methods** card, select **Add new**.
812

913
3. Select the identity provider you want to add.
1014

11-
If you do not see your identity provider listed, these providers can typically still be enabled. If they support OIDC or OAuth, select the generic OIDC option. If they support SAML, select the generic SAML option. Cloudflare supports all SAML and OIDC providers and can integrate with the majority of OAuth providers. If your provider supports both SAML and OIDC, we recommend OIDC for ease of configuration.
15+
<Render file="access/idp-integration-note" product="cloudflare-one" params={{verb: "select" }}/>
1216

1317
4. Fill in the necessary fields to set up your identity provider.
1418

15-
Each identity provider will have different required fields for you to fill in. Step-by-step instructions are shown in the dashboard side panel.
19+
Each identity provider will have different required fields for you to fill in. Step-by-step instructions are shown in the dashboard side panel. Alternatively, refer to the [IdP-specific documentation](/cloudflare-one/identity/idp-integration/).
1620

1721
5. Once you have filled in the necessary fields, select **Save**.
22+
23+
</TabItem> <TabItem label="Terraform">
24+
25+
1. Add the following permission to your [`cloudflare_api_token`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/api_token):
26+
- `Access: Organizations, Identity Providers, and Groups Write`
27+
28+
2. Add an identity provider to Zero Trust using the [`cloudflare_zero_trust_access_identity_provider`](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zero_trust_access_identity_provider) resource. For example, to add a Microsoft Entra ID integration:
29+
30+
31+
<Render file="access/entra-id-terraform" product="cloudflare-one" />
32+
33+
Each identity provider integration has different required attributes. You will need to obtain these attribute values from your identity provider. For more information, refer to the [IdP-specific documentation](/cloudflare-one/identity/idp-integration/).
34+
35+
<Render file="access/idp-integration-note" product="cloudflare-one" params={{verb: "use" }} />
36+
37+
</TabItem> </Tabs>

src/content/partials/learning-paths/zero-trust/configure-idp.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
---
55

6-
import { GlossaryTooltip, Render } from "~/components"
6+
import { GlossaryTooltip, Render} from "~/components"
77

88
An <GlossaryTooltip term="identity provider" link="https://www.cloudflare.com/learning/access-management/what-is-an-identity-provider/">identity provider (IdP)</GlossaryTooltip> stores and manages users' digital identities. You can integrate your existing identity provider with Cloudflare Zero Trust in order to manage user access to your private network. This requires configuration both in Cloudflare and with the identity provider itself.
99

@@ -16,4 +16,4 @@ To add an identity provider:
1616

1717
<Render file="access/idp-integration" product="cloudflare-one" />
1818

19-
Users will now be able to select this IdP when they are prompted to authenticate. To learn more about IdP configuration, refer to [SSO integration](/cloudflare-one/identity/idp-integration/).
19+
Users will now be able to select the IdP when they are prompted to authenticate.

0 commit comments

Comments
 (0)