From f82f7f620a04328afd0984f19cfe3f0452c13da2 Mon Sep 17 00:00:00 2001 From: AdamBouhmad Date: Tue, 3 Jun 2025 20:05:03 -0700 Subject: [PATCH 1/3] update changelog --- .../changelog/fundamentals/2025-06-02-user-groups-beta.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/changelog/fundamentals/2025-06-02-user-groups-beta.mdx b/src/content/changelog/fundamentals/2025-06-02-user-groups-beta.mdx index b2540913e2a88dc..565fb4a6c6a2bff 100644 --- a/src/content/changelog/fundamentals/2025-06-02-user-groups-beta.mdx +++ b/src/content/changelog/fundamentals/2025-06-02-user-groups-beta.mdx @@ -12,7 +12,7 @@ We've also visually overhauled the **Permission Policies UI** to make defining p **What's New** -**User Groups [BETA]**: [User Groups](/fundamentals/manage-members/user-groups/) are a new Cloudflare IAM primitive that enable administrators to create collections of account members that are treated equally from an access control perspective. User Groups can be assigned permission policies, with individual members in the group inheriting all permissions granted to the User Group. User Groups can be created manually, via our APIs, or Terraform. +**User Groups [BETA]**: [User Groups](/fundamentals/manage-members/user-groups/) are a new Cloudflare IAM primitive that enable administrators to create collections of account members that are treated equally from an access control perspective. User Groups can be assigned permission policies, with individual members in the group inheriting all permissions granted to the User Group. User Groups can be created manually or via our APIs. **SCIM User Groups [BETA]**: Centralize & simplify your user and group management at scale by syncing memberships directly from your upstream identity provider (like Okta or Entra ID) to the Cloudflare Platform. This ensures Cloudflare stays in sync with your identity provider, letting you apply Permission Policies to those synced groups directly within the Cloudflare Dashboard. From 6f42f805a6f0e4ea554dd9db149ae6e36b0fa427 Mon Sep 17 00:00:00 2001 From: AdamBouhmad Date: Sat, 21 Jun 2025 11:39:37 -0700 Subject: [PATCH 2/3] GA changelog entry for User Groups --- .../2025-06-23-user-groups-ga.mdx | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx diff --git a/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx b/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx new file mode 100644 index 000000000000000..212c52f60a4ff29 --- /dev/null +++ b/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx @@ -0,0 +1,27 @@ +--- +title: Cloudflare User Groups & SCIM User Groups are now in GA +description: Simplifying the management of users, groups, and permissions within Cloudflare. +products: + - fundamentals +date: 2025-06-23 +--- + +We're announcing the GA of **User Groups for Cloudflare Dashboard** and **System for Cross Domain Identity Management (SCIM) User Groups**, strengthening our RBAC capabilities with stable, production-ready primitives for managing access at scale. + +**What's New** + +**User Groups [GA]**: [User Groups](/fundamentals/manage-members/user-groups/) are a new Cloudflare IAM primitive that enable administrators to create collections of account members that are treated equally from an access control perspective. User Groups can be assigned permission policies, with individual members in the group inheriting all permissions granted to the User Group. User Groups can be created manually or via our APIs. + +**SCIM User Groups [GA]**: Centralize & simplify your user and group management at scale by syncing memberships directly from your upstream identity provider (like Okta or Entra ID) to the Cloudflare Platform. This ensures Cloudflare stays in sync with your identity provider, letting you apply Permission Policies to those synced groups directly within the Cloudflare Dashboard. + +**Stability & Scale**: +These features have undergone extensive testing during the Public Beta period and are now ready for production use across enterprises of all sizes. + +:::note +SCIM Virtual Groups (identified by the pattern `CF--` in your IdP) are now officially deprecated as of June 2, 2025. Phase 1 of end-of-life will take effect on December 2, 2025. We strongly recommend migrating to SCIM User Groups to ensure continued support for SCIM synchronization to the Cloudflare Dash. If you haven’t used Virtual Groups, no action is required. +::: + +For more info: + +- [Get started with User Groups](/fundamentals/manage-members/user-groups/) +- [Explore our SCIM integration guide](/fundamentals/account/account-security/scim-setup/) From 6ace685cf899fbfc0ab9fdc0e9cfd82aedd9dbc1 Mon Sep 17 00:00:00 2001 From: Adam Bouhmad Date: Sat, 21 Jun 2025 11:46:21 -0700 Subject: [PATCH 3/3] Update 2025-06-23-user-groups-ga.mdx --- .../changelog/fundamentals/2025-06-23-user-groups-ga.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx b/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx index 212c52f60a4ff29..a5377b7e567f220 100644 --- a/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx +++ b/src/content/changelog/fundamentals/2025-06-23-user-groups-ga.mdx @@ -18,7 +18,7 @@ We're announcing the GA of **User Groups for Cloudflare Dashboard** and **System These features have undergone extensive testing during the Public Beta period and are now ready for production use across enterprises of all sizes. :::note -SCIM Virtual Groups (identified by the pattern `CF--` in your IdP) are now officially deprecated as of June 2, 2025. Phase 1 of end-of-life will take effect on December 2, 2025. We strongly recommend migrating to SCIM User Groups to ensure continued support for SCIM synchronization to the Cloudflare Dash. If you haven’t used Virtual Groups, no action is required. +SCIM Virtual Groups (identified by the pattern `CF--` in your IdP) are now officially deprecated as of June 2, 2025. SCIM Virtual Groups end-of-life will take effect on December 2, 2025. We strongly recommend migrating to SCIM User Groups to ensure continued support for SCIM synchronization to the Cloudflare Dashboard. If you haven’t used Virtual Groups, no action is required. ::: For more info: