diff --git a/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-oidc-saas.mdx b/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-oidc-saas.mdx
index c0cf043b7daa4f..ea5af16f910635 100644
--- a/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-oidc-saas.mdx
+++ b/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-oidc-saas.mdx
@@ -54,7 +54,7 @@ Some SaaS applications provide the Redirect URL after you [configure the SSO pro
 
 11. <Render file="access/add-access-policies" product="cloudflare-one" />
 
-12. <Render file="access/access-choose-idps" product="cloudflare-one" />
+12. <Render file="access/access-choose-idps" product="cloudflare-one" params={{ appType: "saas" }}/>
 
 13. Select **Next**.
 
diff --git a/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-saml-saas.mdx b/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-saml-saas.mdx
index 27f29364c72955..9a4496d35b6ae6 100644
--- a/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-saml-saas.mdx
+++ b/src/content/docs/cloudflare-one/applications/configure-apps/saas-apps/generic-saml-saas.mdx
@@ -50,7 +50,7 @@ If you are using Okta, Microsoft Entra ID (formerly Azure AD), Google Workspace,
 
 11. <Render file="access/add-access-policies" product="cloudflare-one" />
 
-12. <Render file="access/access-choose-idps" product="cloudflare-one" />
+12. <Render file="access/access-choose-idps" product="cloudflare-one" params={{ appType: "saas" }}/>
 
 13. Select **Next**.
 
diff --git a/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx b/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx
index 17287bc06a7a8a..2d9026ad96133c 100644
--- a/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx
+++ b/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx
@@ -115,7 +115,7 @@ The DNS record does not need to point to an active destination IP address or hos
 Ensure that only **Allow** or **Block** policies are present. **Bypass** and **Service Auth** are not supported for browser-rendered applications.
 :::
 
-13. <Render file="access/access-choose-idps" product="cloudflare-one" />
+13. <Render file="access/access-choose-idps" product="cloudflare-one" params={{ appType: "rdp" }}/>
 
 14. Select **Next**.
 
diff --git a/src/content/partials/cloudflare-one/access/access-choose-idps.mdx b/src/content/partials/cloudflare-one/access/access-choose-idps.mdx
index bbed29249ff1e4..4af495d370156b 100644
--- a/src/content/partials/cloudflare-one/access/access-choose-idps.mdx
+++ b/src/content/partials/cloudflare-one/access/access-choose-idps.mdx
@@ -1,12 +1,21 @@
 ---
-{}
-
+params:
+  - appType
 ---
 
 Configure how users will authenticate:
 
-1. Select the [**Identity providers**](/cloudflare-one/identity/idp-integration/) you want to enable for your application.
+<ol>
+<li>
+Select the [**Identity providers**](/cloudflare-one/identity/idp-integration/) you want to enable for your application.
+</li>
+<li>
+(Recommended) If you plan to only allow access via a single IdP, turn on **Instant Auth**. End users will not be shown the [Cloudflare Access login page](/cloudflare-one/applications/login-page/). Instead, Cloudflare will redirect users directly to your SSO login event.
+</li>
 
-2. (Recommended) If you plan to only allow access via a single IdP, turn on **Instant Auth**. End users will not be shown the [Cloudflare Access login page](/cloudflare-one/applications/login-page/). Instead, Cloudflare will redirect users directly to your SSO login event.
+{ props.appType === "rdp" ?
+(<> <li> <b>WARP authentication identity</b> is not supported for browser-based RDP and should remain turned off. </li> </>) :
+(<> <li> (Optional) Under <b>WARP authentication identity</b>, allow users to authenticate to the application using their <a href="/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/"> WARP session identity</a>. </li> </>)
+}
 
-3. (Optional) Under **WARP authentication identity**, allow users to authenticate to the application using their [WARP session identity](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/).
+</ol>
diff --git a/src/content/partials/cloudflare-one/access/self-hosted-app/generic-public-app.mdx b/src/content/partials/cloudflare-one/access/self-hosted-app/generic-public-app.mdx
index 1e0eb4a75d0904..e9d0b98bbebf1a 100644
--- a/src/content/partials/cloudflare-one/access/self-hosted-app/generic-public-app.mdx
+++ b/src/content/partials/cloudflare-one/access/self-hosted-app/generic-public-app.mdx
@@ -17,7 +17,7 @@ import { Render } from "~/components"
 
 9. <Render file="access/add-access-policies" product="cloudflare-one" />
 
-10. <Render file="access/access-choose-idps" product="cloudflare-one" />
+10. <Render file="access/access-choose-idps" product="cloudflare-one" params={{ appType: "public" }}/>
 
 11. Select **Next**.