Skip to main content
Cloudflare is a network security and content delivery platform. Connect your Cloudflare account to Oleria to bring user, group, and role access into your identity and access graph.

​
What Oleria discovers

  • User accounts and profile attributes synced from Cloudflare’s account directory.
  • Groups and their memberships.
  • Roles assigned to each user.
Oleria uses this data for dormant account detection and access reviews, refreshed on Oleria’s regular sync schedule.

​
Prerequisites

  • A Cloudflare Enterprise plan. Cloudflare offers dashboard SCIM provisioning only to Enterprise customers.
  • The Super Administrator role in your Cloudflare account, to create an account API token with SCIM permissions.
  • Your Cloudflare account ID. It appears on the account’s Overview page in the Cloudflare dashboard.
  • Admin access on the Oleria platform to add a new integration.
For more detail, see Cloudflare’s SCIM provisioning documentation.

​
Get your SCIM credentials from Cloudflare

1

Create an account API token with SCIM permissions

In the Cloudflare dashboard, create an API token with the permission Account -> SCIM Provisioning -> Edit. Under Account Resources, select the account you want to connect, then select Continue to summary and Create Token. Cloudflare recommends an account-owned API token, so the connection doesn’t depend on one person’s user account.
2

Copy your SCIM Base URL and Authentication Token

Copy the token before you leave the page - you’ll paste it into Oleria in the next section, with the base URL:
  • SCIM Base URL - https://api.cloudflare.com/client/v4/accounts/<account_id>/scim/v2, with <account_id> replaced by your Cloudflare account ID.
  • Authentication Token - the API token you created.
Cloudflare shows the token value only once, when you create it. Copy it now and store it securely.

​
Connect Cloudflare to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations, then select the Cloudflare tile.
2

Complete the connection form

Fill in the connection form:
3

Save the integration

Select Connect to validate the credentials and save the integration.

​
Verify the integration

Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. Oleria syncs users, groups, and roles from Cloudflare on its regular sync schedule once the initial sync completes.
If you roll or replace the API token in Cloudflare, update the Authentication Token in Oleria by editing the integration.

​
Remediation actions

Oleria can also take these actions in Cloudflare when the SCIM token can update users and groups:
  • Enable or disable a user account
  • Add or remove a user from a group
  • Create a new user or group
Oleria doesn’t check the token’s permissions until an action runs. If an action fails, confirm the token can update users and groups in Cloudflare.

​
Contact us

For questions about this integration, contact us at support@oleria.com.