Cloudflare Zero Trust Lab — Status & Notes

Current status — reset for final project (1 October 2026)

John confirmed the labs are being reset so the final project can be built in a clean environment. Reset completion has not been verified. Earlier configuration, rule IDs, device registrations and lab completion details below are historical evidence from the previous environment; recheck live state and access after the reset. The active next task is the clean final project, superseding the earlier plan to continue Lab 15. The expired.badssl.com certificate/block-page issue was unresolved when work moved to the reset.

Current lab guide: WebDAV root PDF — 1 October 2026, 12:45. Local: /home/john/cloudflare/Cloudflare Zero Trust & SASE - Lab Guide.pdf; text: /home/john/cloudflare/lab-guide.txt. Supersedes the September 29 guide; old copies deleted. Team: unparalleled-quarterback. Bootcamp

Handover / Session Context

Completed labs

Lab 12.1 — Enable App Launcher

Goal: enable the App Launcher, configure SAML authentication, add usera/userb to the policy, and verify the tile dashboard loads.

Lab 13 — Private-network ZTNA

Lab 14 — Gateway DNS filtering

What the lab guide says to do (12.1.1–12.1.7)

What was done correctly

What was wrong / what we had to fix

API verification script

Scripts live in ~/cloudflare/verify/ on kelp. common.py has ACCOUNT_ID and get_client(). To check the current App Launcher config:

API checks: Configuration, policy usage and log evidence — check directly without screenshots. The API note preserves checks from the previous lab environment; revalidate live state after the reset.

created 2026-09-30  ·  updated 2026-10-01  ·  tags cloudflare, lab, zero-trust, saml  ·  version 3