Use Cloudflare as a SAML identity provider

If you use Cloudflare to centralize authentication and authorization in your business, you can integrate Kinde as a service provider for these processes. This gives you the benefits of Kinde’s robust auth capabilities, while keeping the familiar Cloudflare structure.

You need to set up an enterprise connection in Kinde for this, and add a Cloudflare application. See steps below.

Step 1: Add and configure a Cloudflare connection in Kinde

Link to this section

1. In Kinde, go to Settings > Authentication.
2. In the Enterprise connections section, select Add connections.
3. In the window that appears, select Cloudflare and then select Save. The connection is added.

4. On the connection you just created, select Configure.
5. Enter a random string value for Entity ID, for e.g. 870sa9fbasfasdas23aghkhc12zasfnasd.

6. Copy the Assertion Customer Service (ACS) URL and the Entity ID somewhere you can access it later. You’ll need this to set up your Cloudflare application.

Step 2: Add and configure your Cloudflare application

Link to this section

1. Sign in to your Cloudflare account.
2. In the menu, select Zero trust.
3. Go to Access > Applications, then select Add an application.
4. Select SaaS as the type of application. The Add application window opens.

5. Enter an application name or select an application.
6. Choose Select SAML for the authentication protocol.
7. Select Add Application. The Configure application page opens.

6. Add the Entity ID and ACS URL from Kinde.
7. Copy the SAML Metadata endpoint to your clipboard. You’ll need to enter this back in Kinde.
8. Scroll through the other sections and then select Save configuration. The Add policies page opens.
9. Add a policy to define who can access your application. You might do this via an allowlist and groups, or other strategy.
10. Complete any other relevant sections of the window, and then select Done.

Step 3: Add the metadata URL to your Cloudflare connection

Link to this section

1. In Kinde, go to Settings > Authentication.
2. Select Configure on the Cloudflare connection.
3. Scroll to the IdP metadata URL field and paste the Metadata URL you copied from your Cloudflare app.
4. In the Applications area, switch on the applications you want to use this connection.

5. Select Save. You can now use Cloudflare as an IdP for the selected applications.