Optionalaccount_The Cloudflare account ID.
OptionalamrAuthentication methods used (e.g., "pwd").
OptionaldeviceDevice posture check results, keyed by check ID.
OptionalemailThe user's email address, if available from the identity provider.
OptionalgeoGeographic information about where the user authenticated.
OptionalgroupsGroup memberships from the identity provider.
OptionaliatLogin timestamp (Unix epoch seconds).
OptionalidpIdentity provider information.
OptionalipThe user's IP address at authentication time.
Optionalis_True if the user is authenticated via Cloudflare Gateway.
Optionalis_True if the user connected via Cloudflare WARP.
OptionalnameThe user's display name.
Optionaluser_The user's unique identifier.
Represents the identity of a user authenticated via Cloudflare Access. This matches the result of calling /cdn-cgi/access/get-identity.
The exact structure of the returned object depends on the identity provider configuration for the Access application. The fields below represent commonly available properties, but additional provider-specific fields may be present.