You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/partials/cloudflare-one/access/block-page.mdx
+23-12Lines changed: 23 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,20 +2,33 @@
2
2
{}
3
3
---
4
4
5
-
:::note
5
+
You can customize the block page that displays when users fail to authenticate to an Access application. Each application can have a different block page.
6
6
7
-
Only available on Pay-as-you-go and Enterprise plans.
7
+
:::note[Gateway block page]
8
+
To customize the page that users see when they are blocked by a Gateway firewall policy, refer to [Gateway block page](/cloudflare-one/policies/gateway/block-page/).
8
9
:::
9
10
10
-
You can display a custom block page when users fail to authenticate to an Access application. Each application can have a different block page.
11
+
## Types of block pages
11
12
12
-
:::note
13
+
Cloudflare Access offers three different block page options:
13
14
14
-
To customize the page that users see when they are blocked by a Gateway firewall policy, refer to [Gateway block page](/cloudflare-one/policies/gateway/block-page/).
15
-
:::
15
+
-**Default**: Displays a Cloudflare branded block page.
16
+
-**Custom Redirect URL** - Redirects blocked requests to the specified URL. For example, you could redirect the user to a [dynamic Access Denied page](https://github.com/cloudflare/cf-identity-dynamic) that fetches their identity and shows the exact reason they were blocked.
17
+
-**Custom Page Template** - (Only available on Pay-as-you-go and Enterprise plans) Displays a [custom HTML page](/cloudflare-one/applications/block-page/#create-a-custom-block-page) hosted by Cloudflare.
18
+
19
+
### Identity versus non-identity
20
+
21
+
You can display a different [type of block page](/cloudflare-one/applications/block-page/#types-of-block-pages) to users who fail an identity-based policy versus a non-identity policy.
22
+
23
+
-**Identity failure block page**: Displays when the user fails an identity-based Access policy (such as email, user group, or external evaluation rule), after logging in to their identity provider.
24
+
-**Non-identity failure block page**: Displays when the user fails a non-identity Access policy (such as country, IP, or device posture). Cloudflare checks non-identity attributes before prompting the user to login. Therefore, the non-identity block page would take precedence over the identity block page.
16
25
17
26
## Create a custom block page
18
27
28
+
:::note
29
+
Only available on Pay-as-you-go and Enterprise plans.
30
+
:::
31
+
19
32
To create a custom block page for Access:
20
33
21
34
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **Settings** > **Custom Pages**.
@@ -26,11 +39,9 @@ To create a custom block page for Access:
26
39
27
40
4. Enter a unique name for the block page.
28
41
29
-
5. Select **Failed identity provider check**.
30
-
31
-
6. Copy the **Required script**.
42
+
5. In **Type**, select whether this is an [identity or non-identity block page](/cloudflare-one/applications/block-page/#identity-versus-non-identity).
32
43
33
-
7. In **Custom HTML**, enter the HTML code for your custom page. For example,
44
+
6. In **Custom HTML**, enter the HTML code for your custom page. For example,
34
45
35
46
```html
36
47
<!doctype html>
@@ -43,8 +54,8 @@ To create a custom block page for Access:
43
54
</html>
44
55
```
45
56
46
-
8. To check the appearance of your custom page, select **Download** and open the HTML file in a browser.
57
+
7. To check the appearance of your custom page, select **Download** and open the HTML file in a browser.
47
58
48
-
9. Once you are satisfied with your custom page, select **Save**.
59
+
8. Once you are satisfied with your custom page, select **Save**.
49
60
50
61
You can now select this block page when you [configure an Access application](/cloudflare-one/applications/configure-apps/).
0 commit comments