# PING IDENTITY + CLOUDFLARE

## Secure Workforce Access With Adaptive Trust

- [Secure Workforce Access](https://hub.pingidentity.com/partners/4085-cloudflare-zero-trust-identity-defined-security)
- [Secure MCP Servers](https://hub.pingidentity.com/partners/4387-cloudflare-securing-mcp-servers)

WHY PING AND CLOUDFLARE

## Less Access Friction,   
 Stronger Adaptive Trust Controls

### Identity-Defined Access

Ping verifies identity and applies policy before access is granted.

### Stronger Application Protection

Cloudflare protects customer apps and APIs with CDN, bot detection, and WAF. Ping Identify adds identity and adaptive access.

### **Adaptive, Risk-Aware Security**

Ping Identity can use user, IP, and domain risk to step up, tighten policy, or deny access in real time.

### **Fast Enforcement at the Edge**

Cloudflare enforces decisions close to users, apps, and APIs for lower-friction experiences.

### **Composable Security Architecture**

Use orchestration, policy, and enforcement together in a more flexible architecture.

### **Secure AI and MCP Use Cases**

Cloudflare Workers and Ping Identity extend security to AI agents, delegated API access, and session-based authorization.

WORKFORCE ZERO TRUST

## One Identity Layer Across Web, Access, and AI

Many organizations still manage identity, app protection, access enforcement, and AI access in separate tools. Ping Identity and Cloudflare bring those layers together so identity drives the decision and Cloudflare helps protect and enforce it.

Protect customer-facing experiences

Cloudflare CDN, bot detection, WAF, and edge services help protect high-traffic apps and APIs. Ping adds sign-on, MFA, orchestration, and adaptive controls to keep customer journeys secure and usable.

Secure workforce access

Ping SSO, MFA, and adaptive risk work with Cloudflare Access to support Zero Trust access for remote and hybrid teams.

Extend Trust to AI and APIs

Start and complete verification from QR, email, or SMS, on any preferred device.

AI AND MCP SECURITY

## MCP Security for AI Agents

As AI agents and MCP servers become part of enterprise workflows, identity matters more. Ping Identity and Cloudflare help ensure each agent action starts with an authenticated user and approved access.

Agents get only the permissions needed for each task, and API activity stays tied to the user, agent, and session. That helps reduce risk, improve governance, and support AI workflows with more confidence.

[Get the Brief](https://hub.pingidentity.com/partners/4387-cloudflare-securing-mcp-servers) 

## Identity, Risk, and Enforcement:   
 One Continuous Loop

| User, app, or agent starts a request |  | Ping authenticates the user |  | Cloudflare protects and enforces access |  | Apps and AI stay goverened |
| --- | --- | --- | --- | --- | --- | --- |
| A workforce user requests access, a customer opens an application, or an AI agent calls an MCP server or downstream API. |  | Ping authenticates the user with enterprise credentials, MFA, orchestration, and policy logic, and can bring user, IP, and domain risk into the decision. |  | Cloudflare protects apps and APIs with CDN, bot detection, WAF, and Cloudflare Access, applying context-aware controls for customer and workforce use cases. |  | For MCP and agentic workflows, Cloudflare Workers hosts the server while Ping governs client registration, delegated token exchange, session control, and scoped downstream API access. |

## **Build an Adaptive Trust Strategy Today**

With Ping Identity and Cloudflare, organizations can secure workforce access, protect customer apps and APIs, and extend trusted controls to AI and MCP use cases.

[Talk to Us](https://www.pingidentity.com/en/company/contact-sales.html) 

## Technical Resources for Cloudflare Architects and Developers

[Integration Guide 

### Read Cloudflare’s guide on how to integrate Cloudflare One with PingOne OIDC](https://developers.cloudflare.com/cloudflare-one/integrations/identity-providers/pingone-oidc/) 

[Technical Blog 

### Read Cloudflare’s blog on how it extends identity-defined security with Ping](https://blog.cloudflare.com/cloudflare-ping/) 

[Configuration Guide 

### Visit our documentation hub to learn how to migrate a custom domain to Cloudflare](https://docs.pingidentity.com/pingone/settings/p1_migrate_custom_domain_to_cloudflare.html) 

[Ping API Guide 

Read our API guide on setting inbound traffic policies for Cloudflare-based custom domains](https://docs.pingidentity.com/pingone/settings/p1_inbound_traffic_policies.html) 

Start Today

Contact Sales

[sales@pingidentity.com](mailto:sales@pingidentity.com)

See how Ping can help you deliver secure employee, partner, and customer experiences in a rapidly evolving digital world.