How to prevent people from accessing my app?

Zero Trust Access
1

I’m completely new to this. I have successfully setup a cloudflared tunnel to my server. I wanted to only allow some certain people to actually access it. I went to Access → Applications and added a new application which is configured for my domain name. For some reason, image upload does not work.
I added a new policy that has:
Action: allow
Rules, Include Login Methods: one-time PIN

With this configure, I jumped to my domain. I was prompted to type a email adress. Then I got a pin sent to my inbox which i entered and then I could proceed.

How do I prevent other emails from being able to this? I want to block all emails except for a few ones.

4

It does seem possible to define a rule with Selector emails and the you can add multiple emails to the value field. But if I add more than 1 email, then it will not work loggin in anymore.

5

You will want to add a rule to your policy.

firefox_rQoJ2Emh32
firefox_rQoJ2Emh321023×429 9.03 KB