New Accounts Get Cloudflare's Own IdP by Default!
Hi there, it's me, Shii-chan! Today's change is small, but it smooths out that very first stumble, so I'm happy to share it.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
On Cloudflare's Changelog, there's news that the default login method for new Zero Trust organizations has changed. Until now, newly created organizations defaulted to one-time PIN (OTP), but going forward the default is the Cloudflare identity provider.
The story so far
Until now, when you created a new Zero Trust organization, the first login method was one-time PIN (OTP). You type in a PIN sent to your email, so it works fine, but it was one extra step.
What changes
From now on, new accounts can sign in with their existing Cloudflare account credentials, no extra setup needed, so you can get going right away. Authentication is limited to members of your account, so only your own people can get in.
Dive Deep
A few details worth knowing:
- This applies to newly created accounts only. Existing organizations keep their current login methods and won't switch automatically.
- If you want to use this IdP on an existing account, you need to enable it manually.
- You keep your flexibility: you can still add OTP later or connect third-party identity providers.
Wrap-up
- The default login for new Zero Trust organizations changed from OTP to the Cloudflare identity provider.
- New accounts can sign in with existing Cloudflare credentials, making first-time setup easier.
- New accounts only; existing orgs enable it manually, and OTP and third-party IdPs still work.
This one is a nice fit for anyone just starting out with Cloudflare One, smoothing the on-ramp!
