Cloudflare

Infinitely extensible Access policies

Jun 21, 2022Kenny Johnson, James Royal
Infinitely extensible Access policies
SummaryAI, from the source post

Introduced 'External Evaluation' rules for Cloudflare Access policies, allowing integration with any API to define custom access criteria beyond identity, device, and location. This enables dynamic policy evaluation based on external signals, such as mTLS certificate verification against a registry via a Worker API. The feature provides a secure mechanism for extending Access policies with custom business logic and integrates with existing identity providers and user information.

More from the Account Access Management & Permissions trail