I was thinking about that too but was not able to successfully use the public key provided by Cloudflare as the X.509 certificate. I would have expected the fields to be relevant to Dropbox specifically.Īny help and insights are really appreciated. Secondly, what is the Public key that Cloudflare Access provided me after configuring the new application used for? I mean that I used the Dropbox application type when adding the new application. Does that sound right or am I veering off-course on that? My suspicion is that since Cloudflare is acting as a proxy for my identity provider (GWS) then I need to generate a certificate with Google and use that public key for Dropbox. Cloudflare provided me a public key as part of the setup information for the application, but Dropbox wants an X.509 certificate to enable SSO.

Identity provider sign-in URL: (entered the Access Entity ID from above)Īnd then I get to the part I’m not 100% sure about.Single sign-on: Required (this was enabled, off by default.).On the Dropbox portal, (Enterprise account): Admin Console > Settings > Authentication > Single sign-on Assign Group(s): (selected relevant groups).New policy name: Sign-in every 24-hours.(Moved on to the next page of settings).Instant Auth: yes (since I’m only offering one sign-in option).Identity Providers: Google Workspace (only, removed PIN sign-in).Show application in the App Launcher: yes.Assertion Consumer Service URL: (used the SSO sign-in URL from Dropbox, Settings > Single sign-on).Entity ID: (used the SSO sign-in URL from Dropbox, Settings > Single sign-on).

Here’s what I’ve done so far: Using the Zero Trust Dashboard, Access > Applications > Add new Application You must provide an X.509 certificate to enable single sign-on. Still pretty new to configuring these things… I’m setting up my first Access application and I’m unable to proceed on the Dropbox side of things because I am getting the following error.

Dropbox single sign in