Security · 1h ago
Zero Trust Demo Shows Where Entra ID and Cloudflare Access Actually Break
A Terraform-managed demo tests Microsoft Entra ID with Cloudflare Access over OIDC and SAML, revealing failure modes in group membership and policy logic. Three users with different group memberships are tested against three apps, including a compound policy that correctly denies a user in engineering but not on-call. The origin verifies identity by decoding the JWT assertion, not just echoing headers.
Meridian48 take
The demo is a practical antidote to hand-wavy zero-trust guides, but its value depends on whether enterprises actually replicate these edge cases in production.
Read the full reporting
Proving Zero Trust Actually Works: Entra ID + Cloudflare Access over Both OIDC and SAML →
DEV Community
zero-trustcloudflare-access