Infinitely extensible Access policies
Jun 21, 2022Kenny Johnson, James Royal

Summary
Introduced 'External Evaluation' rules for Cloudflare Access policies, allowing integration with any API to define custom access criteria beyond identity, device, and location. This enables dynamic policy evaluation based on external signals, such as mTLS certificate verification against a registry via a Worker API. The feature provides a secure mechanism for extending Access policies with custom business logic and integrates with existing identity providers and user information.