← Cloudflare One / cloudflare-one / team-and-resources / devices / cloudflare-one-client / deployment / mdm-deployment

Switch between Zero Trust organizations

In the Cloudflare One Client (formerly WARP), users can switch between multiple Zero Trust organizations (or other MDM parameters) that administrators specify in an MDM file. Common use cases include:

• Allow IT security staff to switch between test and production environments.
• Allow Managed Service Providers to support multiple customer accounts.
• Allow users to switch between the default Cloudflare One Client ingress IPs and the Cloudflare China ingress IPs.

To enable multiple organizations, administrators need to modify their MDM file to take an array of configurations. Each configuration must include a display_name parameter that will be visible to users in the Cloudflare One Client GUI. Because display names are listed in the same order as they appear in the MDM file, we recommend putting the most used configurations at the top of the file. When a user opens the Cloudflare One Client for the first time, they will be prompted to log into the first configuration in the list.

An MDM file supports a maximum of 25 configurations. The following example includes three configurations.

<dict>
	<key>configs</key>
	<array>
		<dict>
			<key>organization</key>
			<string>mycompany</string>
			<key>display_name</key>
			<string>Production environment</string>
		</dict>
		<dict>
			<key>organization</key>
			<string>mycompany</string>
			<key>override_api_endpoint</key>
			<string>203.0.113.0</string>
			<key>override_doh_endpoint</key>
			<string>203.0.113.0</string>
			<key>override_warp_endpoint</key>
			<string>203.0.113.0:0</string>
			<key>display_name</key>
			<string>China employees</string>
		</dict>
		<dict>
			<key>organization</key>
			<string>test-org</string>
			<key>display_name</key>
			<string>Test environment</string>
		</dict>
	</array>
</dict>

Download an example .plist file.

Download an example .mobileconfig file.

To switch to a different organization as a user:

3. Select the configuration that you want to connect to.
4. If prompted, complete the authentication steps required for the new organization. Your authentication information will be saved and you will be able to switch back and forth between configurations.

When switching organizations or connecting for the first time, keep the following in mind:

• If this is the first time connecting to an organization, web browsers like Chrome may require a full restart to correctly recognize and trust the organization's root certificate. Cloudflare recommends closing all browser windows after the initial connection. All subsequent switches should not require a restart.
• On macOS, ensure the specific CA certificate for the new organization is properly trusted by verifying its status in Keychain Access.
• Switching configurations may sometimes momentarily disconnect the Cloudflare One Client. If this occurs, simply re-enable the Cloudflare One Client to restore the connection.