Cloudflare Access can now request fresh authentication from a SAML identity provider for every login. Turn on Require reauthentication in the Cloudflare dashboard, or set force_authn to true through the API. Access will then set ForceAuthn to true in signed and unsigned SAML authentication requests.
Access - Require fresh authentication for SAML identity providers
calendar_today
September 14, 2026
domain
cloudflare