How do I configure Cloudflare Zero Trust?

Introduction

Cloudflare Zero Trust allows you to lock down a domain or URL so that only certain authorized users may access it. This guide will cover configuring Zero Trust to only allow users with email accounts under a specific domain name to access a webpage.

Create an Access Group

Go to https://one.dash.cloudflare.com/ and select your account from the list if you are prompted.

Select "Access" on the left-hand side.

Select "Access Groups"

Select "Add a Group"

Fill out the group name. Choose "Emails ending in" for the Selector and enter @ followed by the domain name you would like to be able to authenticate with email.

Create an Application

Select "Applications" on the left-hand side.

Select "Add an application"

Select "Self-hosted"

Fill out the application name and domain. You can also specify a path if you want to protect a particular page, such as an admin login page.

Select "Next" at the bottom-right.

Enter a policy name. Assign the group you created previously.

Select "Next".

Select "Add Application".

When you visit the URL you configured the Cloudflare Access Application for, you should now be presented with a page that prompts you to enter an email address. Enter a valid email address under a domain you added earlier in this guide, and you will be sent a six-digit code you can use to log in.