From 9e600dcc2190c8241062a5e117d975edb7d76e7f Mon Sep 17 00:00:00 2001 From: Ranbel Sun Date: Thu, 3 Apr 2025 15:39:58 -0400 Subject: [PATCH 1/2] clarify non-identity block page --- src/content/partials/cloudflare-one/access/block-page.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/partials/cloudflare-one/access/block-page.mdx b/src/content/partials/cloudflare-one/access/block-page.mdx index 5afd3e5c40e3fc3..53ef565bbcb39be 100644 --- a/src/content/partials/cloudflare-one/access/block-page.mdx +++ b/src/content/partials/cloudflare-one/access/block-page.mdx @@ -21,7 +21,7 @@ Cloudflare Access offers three different block page options: You can display a different [type of block page](/cloudflare-one/applications/block-page/#types-of-block-pages) to users who fail an identity-based policy versus a non-identity policy. - **Identity failure block page**: Displays when the user fails an identity-based Access policy (such as email, user group, or external evaluation rule), after logging in to their identity provider. -- **Non-identity failure block page**: Displays when the user fails a non-identity Access policy (such as country, IP, or device posture). Cloudflare checks non-identity attributes before prompting the user to login. Therefore, the non-identity block page would take precedence over the identity block page. +- **Non-identity failure block page**: Displays when the user fails a non-identity Access policy (such as country, IP, or device posture). Cloudflare checks non-identity attributes before prompting the user to login. Therefore, if a user fails an Access policy that contains both identity and non-identity rules, the non-identity block page would take precedence. ## Create a custom block page From 73fa69cb445ce1f0d3528ce955836ca17dce8c0c Mon Sep 17 00:00:00 2001 From: Ranbel Sun Date: Thu, 3 Apr 2025 15:56:26 -0400 Subject: [PATCH 2/2] revise wording --- src/content/partials/cloudflare-one/access/block-page.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/partials/cloudflare-one/access/block-page.mdx b/src/content/partials/cloudflare-one/access/block-page.mdx index 53ef565bbcb39be..3d75fb6b091a68a 100644 --- a/src/content/partials/cloudflare-one/access/block-page.mdx +++ b/src/content/partials/cloudflare-one/access/block-page.mdx @@ -20,8 +20,8 @@ Cloudflare Access offers three different block page options: You can display a different [type of block page](/cloudflare-one/applications/block-page/#types-of-block-pages) to users who fail an identity-based policy versus a non-identity policy. -- **Identity failure block page**: Displays when the user fails an identity-based Access policy (such as email, user group, or external evaluation rule), after logging in to their identity provider. -- **Non-identity failure block page**: Displays when the user fails a non-identity Access policy (such as country, IP, or device posture). Cloudflare checks non-identity attributes before prompting the user to login. Therefore, if a user fails an Access policy that contains both identity and non-identity rules, the non-identity block page would take precedence. +- **Identity failure block page**: Displays when the user is blocked by an identity-based Access policy (such as email, user group, or external evaluation rule), after logging in to their identity provider. +- **Non-identity failure block page**: Displays when the user is blocked by a non-identity Access policy (such as country, IP, or device posture). Cloudflare checks non-identity attributes before prompting the user to login. ## Create a custom block page