Cloudflare’s SCIM 2.0 implementation now supports group replacement through HTTP PUT, enabling identity providers to sync a group’s complete state—including name, external ID, and members—in a single request.
Cloudflare’s dashboard now lets users store up to five login profiles on a device, streamlining sign‑in for returning users by pre‑filling email fields and resuming SSO or social login flows.
Cloudflare announced the general availability of Optional OAuth Scopes, letting developers mark scopes as required or optional so users can grant least‑privilege access on the consent screen.
Cloudflare’s API now returns a documentation_url field in 403 Forbidden responses, pointing developers directly to the relevant endpoint docs and required roles.
Cloudflare’s Data Loss Prevention (DLP) Test Scan feature lets Zero Trust customers evaluate DLP profiles on sample data without sending real traffic through the Gateway, providing instant feedback on detections, confidence levels, and OCR output.
Cloudflare’s new CASB remediation policies let you automatically fix file‑sharing misconfigurations in Microsoft 365 and Google Workspace, or forward findings to any webhook, without manual triage.
Cloudflare introduced optional OAuth scopes for Wrangler and the API MCP server, letting users grant only the permissions they need. This article explains the new consent flow, the difference between required and optional scopes, and how to adjust permissions during login.
