Zero Trust login page not showing

I’m trying to setup zero trust to protect the admin part of my Wordpress.
I created an application for the /wp-admin/ URL and have one authentication method, the one time pin.

Do I need to enable zero trust after I’ve created all this? At this point I can still just access my admin page, no Cloudflare login page is showing.