Cloudflare One Adds User Risk Scoring

🔑 Enhanced Key Takeaways

• •Cloudflare One supports risk behaviors based on CrowdStrike Zero Trust Assessment (ZTA) device scores, escalating user risk for 'Low' and 'Medium' ratings.[1][2][4]
• •User Risk Scores can be exchanged with Okta to influence SSO-level policies, with configuration steps for sending scores via well-known URL.[1][3]
• •SentinelOne integration enables predefined risk behaviors using device posture attributes to evaluate and adjust user risk scores.[1]
• •Risk scores are assigned as Low, Medium, or High based on the highest-level triggered behavior from continuous monitoring of user activities, posture, and settings.[3]

🛠️ Technical Deep Dive

• •Risk score levels: Low, Medium, High; a user's score equals the highest-level risk behavior triggered.[3]
• •Predefined risk behaviors are disabled by default and must be enabled via Risk score > Risk behaviors dashboard; enabling triggers continuous organization-wide evaluation.[3]
• •CrowdStrike integration behaviors: 'CrowdStrike low device score' and 'CrowdStrike medium device score' automatically increase user risk based on ZTA ranges.[1][2][4]
• •Okta integration: Cloudflare One provides a well-known URL for score exchange; Okta configured under Security > Device Integrations > Receive shared signals.[1]
• •SentinelOne signal ingestion allows device posture attributes to define risk behaviors for score evaluation.[1]

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline