Skip to content

Commit f7a2135

Browse files
kennyj42ranbel
andauthored
Update entra-id.mdx (#19136)
* Update entra-id.mdx Add callout to prevent overwriting due to incomplete PUTs * Make instructions more explicit --------- Co-authored-by: ranbel <[email protected]>
1 parent d930e16 commit f7a2135

File tree

1 file changed

+33
-1
lines changed
  • src/content/docs/cloudflare-one/identity/idp-integration

1 file changed

+33
-1
lines changed

src/content/docs/cloudflare-one/identity/idp-integration/entra-id.mdx

Lines changed: 33 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -206,7 +206,39 @@ Access and Gateway policies for an Entra group will also apply to all [nested gr
206206

207207
## Force user interaction during WARP reauthentication
208208

209-
You can require users to re-enter their credentials into Entra ID whenever they [re-authenticate their WARP session](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/). To configure this setting, make a [`PUT` request](/api/resources/zero_trust/subresources/identity_providers/methods/update/) and set the `prompt` parameter to either `login` or `select_account`.
209+
You can require users to re-enter their credentials into Entra ID whenever they [re-authenticate their WARP session](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/). To configure this setting:
210+
1. Make a `GET` request to the [Identity Providers endpoint](/api/resources/zero_trust/subresources/identity_providers/) and copy the response for the Entra ID identity provider.
211+
2. [Update the Entra ID identity provider](/api/resources/zero_trust/subresources/identity_providers/methods/update/) using a `PUT` request. In the request body, include all existing configurations and set the `prompt` parameter to either `login` or `select_account`. For example,
212+
```curl {17}
213+
curl --request PUT \
214+
https://api.cloudflare.com/client/v4/accounts/{account_id}/access/identity_providers/{identity_provider_id} \
215+
--header "Authorization: Bearer <API_TOKEN>" \
216+
--header "Content-Type: application/json" \
217+
--data '{
218+
"id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
219+
"type": "azureAD",
220+
"uid": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
221+
"name": "Entra ID",
222+
"version": "31e74e9b4f033e16b604552091a72295",
223+
"config": {
224+
"azure_cloud": "default",
225+
"client_id": "<CLIENT_ID>",
226+
"conditional_access_enabled": false,
227+
"directory_id": "<AZURE_DIRECTORY_ID>",
228+
"redirect_url": "https://<TEAM_NAME>.cloudflareaccess.com/cdn-cgi/access/callback",
229+
"prompt": "login",
230+
"support_groups": true
231+
},
232+
"scim_config": {
233+
"enabled": true,
234+
"user_deprovision": true,
235+
"seat_deprovision": false,
236+
"group_member_deprovision": false,
237+
"identity_update_behavior": "automatic"
238+
},
239+
"scim_base_url": "https://<TEAM_NAME>.cloudflareaccess.com/populations/f174e90a-fafe-4643-bbbc-4a0ed4fc8415/scim/v2"
240+
}'
241+
```
210242

211243
## Example API Configuration
212244

0 commit comments

Comments
 (0)