App Launcher

With the Access App Launcher, users can open all applications that they have access to from a single dashboard.

The App Launcher is available at a team domain unique to your Cloudflare Zero Trust account, for example mycompany.cloudflareaccess.com.

Users log in using one of the identity providers configured for the account. Once Access authenticates the user, the App Launcher displays applications they are authorized to use, in the form of application tiles. Selecting an application tile launches the application's hostname, sending the user to that tool as part of their SSO flow.

Enable the App Launcher

By default, the App Launcher is disabled. To enable it, you must configure a policy that defines which users can access the App Launcher.

To enable the App Launcher:

1. In Cloudflare One ↗, go to Access controls > Access settings.

2. Under the Manage your App Launcher card, select Manage.

3. On the Policies tab, build a policy to define who can access your App Launcher portal. These rules do not impact permissions for the applications secured behind Access.

4. On the Authentication tab, choose the identity providers users can authenticate with.

5. Select Save.

The App Launcher is now available at <your-team-name>.cloudflareaccess.com. You can always edit your App Launcher rules by going to Access controls > Access settings.

Add a tile to the App Launcher

Tiles have a one-to-one relationship with each application you create in Access. The tile names displayed in the Access App Launcher portal correspond to the application names listed under Access controls > Applications. For example, if you create one application for general access to your Jira deployment and a separate application that restricts requests to a particular Jira path, a user authorized for both will see separate tiles for each. If you add multiple hostnames to a single application, the user will only see the domain selected in the application's App Launcher settings.

To show an Access application in the App Launcher:

1. In Cloudflare One ↗, go to Access controls > Applications.

2. Select an application and select Configure.

3. Go to Experience settings.

4. Select Show application in App Launcher. The App Launcher link will only appear for users who are allowed by your Access policies. Blocked users will not see the app in their App Launcher.

   Note

   This toggle does not impact the user's ability to reach the application. Allowed users can always reach the application via a direct link, regardless of whether the toggle is enabled. Blocked users will never have access to the application.

5. (Optional) To use a custom logo for the application tile, select Use custom logo and enter a link to your desired image.

   Note

   If you are having issues specifying a custom logo, check that the image is served from an HTTPS endpoint. For example, http://www.example.com/upload/logo.png will not work. However, https://www.example.com/upload/logo.png will.

6. In Application domains, choose a domain to use for the App Launcher link.

7. (Optional) In Tags, add custom tags so that users can more easily find the application in their App Launcher.

Customize App Launcher appearance

To customize the App Launcher with your own branding, messages, and links, refer to the Custom pages documentation.