[CF1] sso limitations update #19754
Merged
[CF1] sso limitations update #19754
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
deadlypants1973
requested review from
a team,
kennyj42 and
ranbel
as code owners
Deploying cloudflare-docs with
|
| Latest commit: |
ee97fa0
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://068d94bf.cloudflare-docs-7ou.pages.dev |
| Branch Preview URL: | https://kate-fixes-ssolimit.cloudflare-docs-7ou.pages.dev |
Contributor
|
Files with changes (up to 15) |
Oxyjun
approved these changes
Feb 5, 2025
kennyj42
reviewed
Feb 5, 2025
| :::note | ||
|
|
||
| We recommend noting down your [Global API key](/fundamentals/api/get-started/keys/) in case you need to [disable SSO](#option-2-disable-dashboard-sso) later. | ||
| Cloudflare recommends noting down your [Global API key](/fundamentals/api/get-started/keys/) in case you need to [disable SSO](#option-2-disable-dashboard-sso) later. |
Contributor
There was a problem hiding this comment.
should we caveat to store it carefully. the global api key is very powerful
kennyj42
reviewed
Feb 5, 2025
| * Users with plus-addressed emails, such as `[email protected]`. If you have users like this added to your Cloudflare organization, they will be unable to login with SSO. | ||
| * IdP initiated logins (such as a tile in Okta). All login attempts must originate from `https://dash.cloudflare.com`. You can create a bookmark for this URL in your IdP to assist users. | ||
| - Users with plus-addressed emails, such as `[email protected]`. If you have users like this added to your Cloudflare organization, they will be unable to login with SSO. | ||
| - IdP initiated logins (such as a tile in Okta). All login attempts must originate from `https://dash.cloudflare.com`. You can create a bookmark for this URL in your IdP to assist users. |
Contributor
There was a problem hiding this comment.
we can actually do this, kind of. If you configure a Cloudflare SAML application in Okta and paste in the SSO config info from the Dash SSO app, it will work.
Contributor
Author
There was a problem hiding this comment.
@kennyj42 making a note of this in another ticket. Need to add these instructions in the right place.
kennyj42
reviewed
Feb 5, 2025
| * IdP initiated logins (such as a tile in Okta). All login attempts must originate from `https://dash.cloudflare.com`. You can create a bookmark for this URL in your IdP to assist users. | ||
| - Users with plus-addressed emails, such as `[email protected]`. If you have users like this added to your Cloudflare organization, they will be unable to login with SSO. | ||
| - IdP initiated logins (such as a tile in Okta). All login attempts must originate from `https://dash.cloudflare.com`. You can create a bookmark for this URL in your IdP to assist users. | ||
| - Adding a separate email-based policy to the SSO application that does not match your SSO domain policy. As your account team must [approve and create your SSO domain](/cloudflare-one/applications/configure-apps/dash-sso-apps/#2-contact-your-account-team) based on the [SSO domain requirements](/cloudflare-one/applications/configure-apps/dash-sso-apps/#sso-domain-requirements), adding a new policy domain policy on your own will not work. |
Contributor
There was a problem hiding this comment.
"new policy domain policy" <- that needs to be reworded
deadlypants1973
commented
Feb 6, 2025
src/content/docs/cloudflare-one/applications/configure-apps/dash-sso-apps.mdx
Outdated
Show resolved
Hide resolved
deadlypants1973
commented
Feb 6, 2025
src/content/docs/cloudflare-one/applications/configure-apps/dash-sso-apps.mdx
Outdated
Show resolved
Hide resolved
deadlypants1973
commented
Feb 6, 2025
src/content/docs/cloudflare-one/applications/configure-apps/dash-sso-apps.mdx
Outdated
Show resolved
Hide resolved
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
15081
Screenshots (optional)
Documentation checklist