Switch between Zero Trust organizations
Feature availability
| WARP modes | Zero Trust plans |
|---|---|
| All modes | All plans |
| System | Availability | Minimum WARP version |
|---|---|---|
| Windows | ✅ | 2024.1.159.0 |
| macOS | ✅ | 2024.1.160.0 |
| Linux | ✅ | 2024.2.62.0 |
| iOS | ❌ | |
| Android | ✅ | 1.4 |
| ChromeOS | ✅ | 1.4 |
In Cloudflare WARP, users can switch between multiple Zero Trust organizations (or other MDM parameters) that administrators specify in an MDM file. Common use cases include:
- Allow IT security staff to switch between test and production environments.
- Allow Managed Service Providers to support multiple customer accounts.
- Allow users to switch between the default WARP ingress IPs and the Cloudflare China ingress IPs.
MDM file format
To enable multiple organizations, administrators need to modify their MDM file to take an array of configurations. Each configuration must include a display_name parameter that will be visible to users in the WARP client GUI. Because display names are listed in the same order as they appear in the MDM file, we recommend putting the most used configurations at the top of the file. When a user opens the WARP client for the first time, they will be prompted to log into the first configuration in the list.
An MDM file supports a maximum of 25 configurations. The following example includes three configurations.
mdm.xml<array> <dict> <key>organization</key> <string>mycompany</string> <key>display_name</key> <string>Production environment</string> </dict> <dict> <key>organization</key> <string>mycompany</string> <key>override_api_endpoint</key> <string>203.0.113.0</string> <key>override_doh_endpoint</key> <string>203.0.113.0</string> <key>override_warp_endpoint</key> <string>203.0.113.0:2408</string> <key>display_name</key> <string>Cloudflare China network</string> </dict> <dict> <key>organization</key> <string>test-org</string> <key>display_name</key> <string>Test environment</string> </dict>
</array>
plist
Download an example .plist file. If placing the file manually, be sure to convert the file into binary format.
mobileconfig
Download an example .mobileconfig file.
mdm.xml<array> <dict> <key>organization</key> <string>mycompany</string> <key>display_name</key> <string>Production environment</string> </dict> <dict> <key>organization</key> <string>mycompany</string> <key>override_api_endpoint</key> <string>203.0.113.0</string> <key>override_doh_endpoint</key> <string>203.0.113.0</string> <key>override_warp_endpoint</key> <string>203.0.113.0:2408</string> <key>display_name</key> <string>Cloudflare China network</string> </dict> <dict> <key>organization</key> <string>test-org</string> <key>display_name</key> <string>Test environment</string> </dict>
</array>
Switch organizations in WARP
To switch to a different organization as a user:
Open the WARP client on your device.
Select the gear icon.
Select Switch configurations. The menu will show the organizations that the admin has configured for your device.
Select the organization that you want to connect to.
If prompted, complete the authentication steps required for the new organization. Your authentication information will be saved and you will be able to switch back and forth between organizations.
To switch to a different organization as a user:
Open the WARP client on your device.
Go to Settings > Advanced.
Select Switch configurations. The menu will show the organizations that the admin has configured for your device.
Select the organization that you want to connect to.
If prompted, complete the authentication steps required for the new organization. Your authentication information will be saved and you will be able to switch back and forth between organizations.