Zero Trust controls for your SaaS applications

Cloudflare Access now supports securing SaaS applications by injecting Zero Trust checks into the SAML SSO flow. This is achieved using Cloudflare Workers to convert JWTs into SAML assertions, allowing for identity-aware and context-driven rules (device posture, MFA, country of login) to be applied to SaaS applications. This enables centralized logging and consistent security controls across self-hosted and SaaS applications, with guided integrations for AWS, Zendesk, and Salesforce.