ST-2026-056 · Authentication & identity
Cloudflare Access supports encrypted SAML assertions
Access identity-provider integrations can encrypt SAML assertions with Cloudflare-managed certificates and rotate them without downtime.
Cloudflare AccessSAMLassertion encryptioncertificates
Previous state
SAML assertions were not protected through the newly documented Cloudflare-managed assertion-encryption capability.
Current state
Administrators can enable assertion encryption, export certificates or metadata and rotate managed certificates without downtime.
Affected users
Who needs to care
Cloudflare Access SAML identity-provider integrations.
Required response
What to do
Enable and test encryption per IdP and plan certificate rollover.
Evidence boundary
What the source does not prove
Availability does not prove that every existing SAML integration is encrypted.
Lifecycle history
Dated event sequence
- Encryption released
Managed SAML assertion encryption became available.
Evidence ledger
First-party sources
- 01Cloudflare Developers — Cloudflare Access changelog
Official product changelog · 2026-06-03
Open official source ↗