Overview
Get started
Edge certificates
Universal SSL
Enable Universal SSL certificates
Disable Universal SSL certificates
Limitations
Troubleshooting
Advanced certificates
Manage advanced certificates
API commands
Custom certificates
Manage custom certificates
Renewing
Bundle methodologies
Add CAA records
Remove key file password
Enforce HTTPS connections
Domain Control Validation (DCV)
Methods
TXT
Email
HTTP
Troubleshooting
Staging environment (Beta)
Backup certificates
Additional options
Certificate Transparency Monitoring
HTTP Strict Transport Security (HSTS)
Certificate Signing Requests (CSRs)
TLS 1.3
Minimum TLS Version
Automatic HTTPS Rewrites
Always Use HTTPS
Opportunistic Encryption
Client certificates
Create a client certificate
Configure your mobile app or IoT device
Enable mTLS
Revoke a client certificate
Troubleshooting
Keyless SSL
Get started
Hardware security modules
Configuration
AWS cloud HSM
Azure Dedicated HSM
Azure Managed HSM
SoftHSMv2
Entrust nShield Connect
IBM cloud HSM
Google Cloud HSM
Upgrade your key server
Reference
High availability
Scaling and benchmarking
Keyless delegation
Troubleshooting
Mutual authentication
Origin server
Encryption modes
Cipher suites
Origin CA certificates
SSL/TLS Recommender
Authenticated origin pull
How authenticated origin pulls work
Set up authenticated origin pulls
Custom origin trust store
SSL for SaaS
Reference
Cipher suites
TLS protocols
Certificate and hostname priority
Certificate authorities
Browser compatibility
Migration guides
Changes to HTTP DCV
Digicert update
Universal certificates
Custom hostnames
Certificate pinning
Certificate statuses
Validation backoff schedule
Validity periods
FAQ

SSL for SaaS

Cloudflare for SaaS allows you to extend the security and performance benefits of Cloudflare’s network to your customers via their own custom or vanity domains.

For example, a customer may want to use their vanity domain app.customer.com to point to an application hosted on your Cloudflare zone service.saas.com.

SSL for SaaS is now part of the broader feature, Cloudflare for SaaS. As of July 11, 2022, the documentation has been relocated to Cloudflare for SaaS - SSL.