Switch between Zero Trust organizations

Feature availability

WARP modes	Zero Trust plans ↗
All modes	All plans

System	Availability	Minimum WARP version
Windows	✅	2024.1.159.0
macOS	✅	2024.1.160.0
Linux	✅	2024.2.62.0
iOS	❌
Android	✅	1.4
ChromeOS	✅	1.4

In Cloudflare WARP, users can switch between multiple Zero Trust organizations (or other MDM parameters) that administrators specify in an MDM file. Common use cases include:

• Allow IT security staff to switch between test and production environments.
• Allow Managed Service Providers to support multiple customer accounts.
• Allow users to switch between the default WARP ingress IPs and the Cloudflare China ingress IPs.

MDM file format

To enable multiple organizations, administrators need to modify their MDM file to take an array of configurations. Each configuration must include a display_name parameter that will be visible to users in the WARP client GUI. Because display names are listed in the same order as they appear in the MDM file, we recommend putting the most used configurations at the top of the file. When a user opens the WARP client for the first time, they will be prompted to log into the first configuration in the list.

An MDM file supports a maximum of 25 configurations. The following example includes three configurations.

Windows

<array>
  <dict>
    <key>organization</key>
    <string>mycompany</string>
    <key>display_name</key>
    <string>Production environment</string>
  </dict>
  <dict>
    <key>organization</key>
    <string>mycompany</string>
    <key>override_api_endpoint</key>
    <string>203.0.113.0</string>
    <key>override_doh_endpoint</key>
    <string>203.0.113.0</string>
    <key>override_warp_endpoint</key>
    <string>203.0.113.0:2408</string>
    <key>display_name</key>
    <string>Cloudflare China network</string>
  </dict>
  <dict>
    <key>organization</key>
    <string>test-org</string>
    <key>display_name</key>
    <string>Test environment</string>
  </dict>
</array>

macOS

plist

Download an example .plist file. If placing the file manually, be sure to convert the file into binary format.

mobileconfig

Download an example .mobileconfig file.

Linux

<array>
  <dict>
    <key>organization</key>
    <string>mycompany</string>
    <key>display_name</key>
    <string>Production environment</string>
  </dict>
  <dict>
    <key>organization</key>
    <string>mycompany</string>
    <key>override_api_endpoint</key>
    <string>203.0.113.0</string>
    <key>override_doh_endpoint</key>
    <string>203.0.113.0</string>
    <key>override_warp_endpoint</key>
    <string>203.0.113.0:2408</string>
    <key>display_name</key>
    <string>Cloudflare China network</string>
  </dict>
  <dict>
    <key>organization</key>
    <string>test-org</string>
    <key>display_name</key>
    <string>Test environment</string>
  </dict>
</array>

Switch organizations in WARP

macos, windows, and linux

To switch to a different organization as a user:

1. Open the WARP client on your device.

2. Select the gear icon.

3. Select Switch configurations. The menu will show the organizations that the admin has configured for your device.

4. Select the organization that you want to connect to.

5. If prompted, complete the authentication steps required for the new organization. Your authentication information will be saved and you will be able to switch back and forth between organizations.

Note

Only admins can add additional organizations to the WARP GUI. To connect to an organization that is not displayed in the GUI, go to Preferences > Account to manually log out of the old organization and log into the new organization.

ios and android

To switch to a different organization as a user:

1. Open the WARP client on your device.

2. Go to Settings > Advanced.

3. Select Switch configurations. The menu will show the organizations that the admin has configured for your device.

4. Select the organization that you want to connect to.

5. If prompted, complete the authentication steps required for the new organization. Your authentication information will be saved and you will be able to switch back and forth between organizations.

Note

Only admins can add additional organizations to the WARP GUI. To connect to an organization that is not displayed in the GUI, go to Settings > Account to manually log out of the old organization and log into the new organization.