Cloudflare Access on Google Workspace with Google as IDP - Doesn't block all access

Hello all,

I want to create an application on Cloudflare to filter accesses to Google Workspace.

I followed the tutorial here to set up the Application and this one to create a SSO integration with Google to allow users to sign in with their Google identity.

Now the application works fine when trying to reach<> (replacing this with my domain).

However, if i try to reach gmail without specifying the organization, like this one, i’m not going through the Cloudflare filter

Any advice on how I can reach the anticipated behavior?