Authenticate with Azure AD

This step needs only to be added if the website should be protected with login and authenticate against the Azure AD.

Azure AD must be activated as an Identity Provider in the cloudflare account, see Azure AD as an identity provider.

1. Log in to the Azure portal and select Azure Active Directory.
2. Select Group.
3. Select New Group.
4. Chose the Group type* security.
5. Enter a Gropu name and Description.
6. Chose members
7. Click Create.
8. Copy the Object id for further use.

1. Log in to the Cloudflare dashboard and select your account.
2. In Account Home, select Worker & Pages > Owerview.
3. select the appropriate page.
4. Select Settings and then activate Enable access poliy in the section Access policy.
5. Click on Manage Policies.
6. Chose the Application and click Configure.
7. Click on D and follow step 9 in the next section.
8. …

To add authentication

1. Log in to the Cloudflare dashboard and select your account.
2. In Account Home, select Zero Trust.
3. In AZero Trust, select Access > Applications.
4. Select Add an application.
5. Select Self-hosted
6. Enter an application name.
7. Select the domain which to add authentication and if necessary a subdomain.
8. Keep Enable App in App Launcher active.
9. Deactivate Accept all available identity providers.
10. Select Azure AD.
11. Deselect others.
12. Activate Skip identity provider selection if only one is configured.
13. Klick Next button.
14. Enter a Policy name e.g. “Allow Members - Cloudflare Pages”.
15. Chose Allow for Action.
16. Chose Same as application session timeout for Session duration.
17. In Configure rules chose Azure Group as selector and enter the Azure Group id (Object id).
18. Click Next
19. Click Add application