Access, Cloudflare One - Account context in Access deny redirects

<p>App-aware Cloudflare Access deny redirects include an <code>account_id</code> query parameter when account context is available. Custom block pages can use it to identify the account that owns the application represented by <code>kid</code>.</p> <p>For example, a custom redirect can include:</p> <figure class="nb-code-figure" data-nb-lang="txt"><pre class="astro-code astro-code-themes github-light github-dark nb-shiki-c6xiwz" tabindex="0" data-language="txt" data-nb-lang="txt"><code><span class="line"><span class="nb-shiki-wvjl67">https://denied.example.com/?kid=&lt;APP_AUD&gt;&amp;account_id=&lt;ACCOUNT_ID&gt;&amp;original_url=app.example.com%2Fadmin</span></span></code></pre></figure> <p>The account ID helps block-page integrations look up applications through account-scoped APIs. It is context, not proof of authentication or authorization.</p> <p>For parameter descriptions and an example, refer to <a href="https://developers.cloudflare.com/cloudflare-one/reusable-components/custom-pages/access-block-page/#custom-redirect-url-parameters">Custom redirect URL parameters</a>.</p>