Skip to content
v2.19.0GitHub

Cloudflare Zero Trust

Use Pocket ID as an identity provider for Cloudflare Zero Trust Access.

  1. In Pocket ID, open Administration → OIDC Clients and click Add OIDC Client.
  2. Enter a name such as Cloudflare Zero Trust and add the callback URL https://<your-team-name>.cloudflareaccess.com/cdn-cgi/access/callback.
  3. Click Create and copy the Client ID and the Client secret. Under Show more details, also copy the Authorization URL, the Token URL and the Certificate URL. The client secret is only shown once.
  4. On the client’s Access tab, select the groups that may sign in under Allowed User Groups, or choose All Users.
  1. Sign in to the Cloudflare Zero Trust dashboard.
  2. In the left navigation, go to Integrations → Identity providers.
  3. Under Identity provider integrations, click Add an identity provider.
  4. Choose OpenID Connect as the identity provider.
  5. Enter a name for the new login method.
  6. Fill in the fields:
    • App ID: the Client ID from Pocket ID.
    • Client Secret: the Client secret from Pocket ID.
    • Auth URL: the Authorization URL from Pocket ID.
    • Token URL: the Token URL from Pocket ID.
    • Certificate URL: the Certificate URL from Pocket ID.
  7. Save the new login method and test it in Cloudflare.