Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, I’m encountering an issue setting up a custom domain on our Ory Network Essentials environment. I’ve followed the documentation and added a new CNAME record on our DNS provider (Cloudflare) that points to `<our-project-slug>.<http://projects.oryapis.com|projects.oryapis.com>`. I’ve also deactivated proxying per the docs. The change has propagated, and when querying the new record with dig, the output looks exactly like the provided example in the docs.

However, when I open the domain in a browser, I get a Cloudflare error:
`Error 1014: CNAME Cross-User Banned`  with the description: `The host is configured as a CNAME across accounts on Cloudflare, which is not allowed by Cloudflare’s security policy.`

Is anyone else using Cloudflare as a DNS provider for custom domains and/or has run into this error? Any help would be appreciated.

I see this error in CloudFlare: "The hostname is associated with a held zone. Please contact the owner of this domain to have the hold removed."
I think this is the solution: <https://developers.cloudflare.com/fundamentals/setup/account/account-security/zone-holds/#release-zone-holds>