Give your automated services credentials with Access service tokens
Feb 7, 2019Sam Rhea
Summary
This post introduces Access service tokens, a new feature for Cloudflare Access that allows automated services, scripts, and bots to authenticate to internal sites secured by Access. It details how these tokens work by providing a Client ID and Secret that are validated directly by Cloudflare, bypassing the need for an identity provider redirect. The post explains how to generate these tokens in the dashboard, update Access policies to grant them permissions, and provides a use case of a chatbot accessing product usage reports.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack