Use your own custom domain
Build on Kinde
You can take advantage of Cloudflare’s advanced security features such as their WAF and bot mitigation tools by proxying your Kinde hosted auth pages through Cloudflare.
Once you receive the email that the custom domain has been set up in Kinde, go to Cloudflare and change the custom domain record from DNS only to Proxied.
Leave the ACME challenge record as DNS. This is used to verify domain ownership each time the certificate needs to be renewed and cannot be proxied.
To test the proxied domain, create a WAF rule to show a Cloudflare Managed Challenge on all incoming requests.
For example, create a rule to match the hostname of the custom domain used in Kinde and the request originating from Australia. The action is to show a Managed Challenge.