Hi Descope Team, We are running into a Cloudflare Error 1014 (CNAME Cross-User Banned) while setting up a custom domain for Descope's Custom Social Login with Google (https://docs.descope.com/auth-methods/oauth/providers/setting-up-your-own-apps/google). Our domain is also on Cloudflare, so when we CNAME our subdomain to cname.descope.com, Cloudflare blocks the cross-account request. The CNAME record is set to DNS-only (gray cloud) so no proxy-mode here and DNS resolves correctly. Per Cloudflare's docs, the fix requires the CNAME target owner (Descope) to provision the hostname as a Custom Hostname via Cloudflare for SaaS. Has anyone else run into this? Is there a process on the Descope side to get a custom hostname added for customers whose domains are on Cloudflare?

Hi, I'm Descope's AI assistant. I've put together an initial response below based on your question. Custom Domain Setup for Google Login: Descope supports using a custom domain for Custom Social Login with Google. To set this up, you need to create a custom domain that points to Descope via CNAME: • For US projects:

<http://cname.descope.com|cname.descope.com>

• For EU projects:

<http://CNAME.euc1.descope.com|CNAME.euc1.descope.com>

This configuration allows the Google sign-in page to display your domain instead of

<http://descope.com|descope.com>

. CNAME Cross-User Banned (Error 1014): This error occurs when a CNAME record points to a domain on a different Cloudflare account, which is blocked by Cloudflare to prevent abuse. To resolve this issue, the target domain owner (Descope) needs to register the customer's hostname via Cloudflare for SaaS. Important Note: Descope's documentation does not provide a self-serve process for allowing individual customer hostnames through Cloudflare for SaaS, so it is necessary for Descope to take action on this matter. Additional Resources: • Custom Social Login with Google | Descope Documentation • Descope SSO Migration: Your Tenant Admin’s Best Friend • Support

so just validating, you did this process right ? https://docs.descope.com/how-to-deploy-to-production/custom-domain

No, it was this process: https://docs.descope.com/auth-methods/oauth/providers/setting-up-your-own-apps/google

When of the steps in that doc Is to do the doc I sent you