Optional SSO on Tunnels

My application serves content that can be tagges as public or private, if it is public it should be possible to access without authentication, if it is private it should require you to sign in using a relevant SSO account. I am able to get the list server side and redirect the user to the cloudflare access sso url if necessary but I can't seem to find any docs to figure out what the URL I'd be redirecting to would be. Is there any documentation regarding this that I just haven't found? cheers :D
1 Reply
d3rpp
d3rpp5mo ago
re-reading that now it doesn't really make much send i'll try drawing a little flow diagram below
--> Public Content --> Auth Optional

--> Private Content --> Has Auth -- yes --> Check Auth --> Return Content

-- no --> Redirect to https://*tenancy*.cloudflareaccess.com/...
--> Public Content --> Auth Optional

--> Private Content --> Has Auth -- yes --> Check Auth --> Return Content

-- no --> Redirect to https://*tenancy*.cloudflareaccess.com/...