Skip to content

Cloudflare

Cloudflare One is used to secure certain applications. This allows internal sites (like the Kremlin Archive) to be secured without needing to expose the service publicly, needing custom authentication, or needing to use Active Directory accounts.

The application portal for The Kremlin is at https://thekremlin.cloudflareaccess.com.

Google Login Provider

There is a Google Cloud project named "The Kremlin". The following steps were used to create the OAuth app used to configure the Cloudflare login method.

  • Go to Google Cloud console.
  • Go to APIs & Services -> Credentials.
  • Create an OAuth client.
  • Type: Web application
  • Name: The Kremlin
  • Authorized JavaScript origins: https://thekremlin.cloudflareaccess.com
  • Authorized redirect URIs: https://thekremlin.cloudflareaccess.com/cdn-cgi/access/callback