Zero Trust for SaaS: Deploying mTLS on custom hostnames

This post introduces the ability for SaaS providers to enable mutual TLS (mTLS) authentication on their customers' domains through Cloudflare Access. This extends the zero-trust security model to scenarios where SaaS providers manage origins for domains they do not own, allowing them to enforce device-level authentication for sensitive API endpoints and provide per-customer isolation.