Integration Guide: Cloudflare

Overview

The Cloudflare integration connects Tello IAM to your Cloudflare account using an Account ID and a custom API token. Both values are generated in the Cloudflare dashboard and entered into Tello IAM manually.

Before connecting

The Administrator completing this setup must have access to the Cloudflare account and permission to create API tokens under Manage Account.

Step 1: Locate your Account ID

Your Cloudflare Account ID is the 32-character identifier found in the Cloudflare dashboard URL after signing in. It appears in the URL in the format: dash.cloudflare.com/<account-id>/...

Copy this value - you will need it when configuring the integration in Tello IAM.

Step 2: Create an API token in Cloudflare

1. Sign in to the Cloudflare dashboard.
2. In the left navigation, select Manage Account, then select Account API Tokens.
3. Select Create Token and choose the Custom token template.
4. Enter a name for the token (for example, Tello IAM).
5. Under Permission policies, configure the following permissions:
   • All zones — Zone — Read
   • Entire account — Account Settings — Read
   • Entire account — Account Settings — Write
6. Set a token expiration if required by your organization's policy, or select No expiration.
7. Select Continue to summary, then Create Token.
8. Copy the token immediately. It will only be displayed once.

Important: The API token is only displayed once after creation. Copy it before closing the page. If the token is lost, a new token must be created.

Step 3: Connect Cloudflare in Tello IAM

1. Navigate to Integrations in the left navigation.
2. Select + Add Integration.
3. Search for Cloudflare and select Add.
4. Enter your Account ID in the Account ID field.
5. Paste the copied token into the API Token field.
6. Select Test Connection to verify both values are valid. A Connection successful confirmation will appear if accepted.
7. Select Connect. The integration appears on the Integrations page and an initial sync begins automatically.

Verify the connection

After the initial sync completes, confirm the following on the Integrations page:

• The Cloudflare integration displays a status of Active
• A sync timestamp is present and reflects the completed sync
• User records on the Users page display detected Cloudflare permissions in the Access column

Reauthorizing the connection

If the Cloudflare integration loses authorization, it will display an error on the Integrations page. To reauthorize, generate a new API token in Cloudflare with the same permissions, then select the integration row in Tello IAM, select Configure, and enter the new token.

Related articles

• Configuring Integrations — manage sync schedules, drift detection, and integration settings
• Understanding Errors — resolve integration errors and authorization failures