Zero Trust not protecting Wordpress login

What is the name of the domain?

amenitycenter.org

Related to

Access

What is the error number?

n/a

What is the error message?

n/a

What is the issue you’re encountering

Zero Trust is not intercepting the access to wp-admin and wp-login

What steps have you taken to resolve the issue?

Followed all Zero Trust docs, third-party websites, etc. to implementing Zero Trust Access to these sites.

What are the steps to reproduce the issue?

Go to Sign in ・ Cloudflare Access — you shouldn’t get there but you will.

I have also temporarily instigated a security tool to redirect the wp-admin to another path - hmu for that path.

When I hit Sign in ・ Cloudflare Access, I see a Cloudflare Access page:


Is it possible you’re just hitting this URL while already authenticated? Did you try testing/opening it in an incognito tab, or browser you’re not logged in at?

2 Likes

Odd. I’ve used different browsers, Private/Incognito, etc. I end up with

OR a 404 redirect if I have used the “secret” replacement URL for wp-admin and wp-login.

Ok, stranger still: if I click the actual link in this thread (as you did) I get the CF access page.

Wth.