2026-08-12 — Finish setup browser order and multi-org consent

Browser order: open Zero Trust as a Cloudflare operator; keep GitHub unlocked in the same browser so Finish setup / Test / 2FA does not break the return. “Sign into GitHub first” alone is incomplete.

Authorize org list: GitHub shows every org the authorizer belongs to (read:org). Org-owned apps auto-grant the owning org. Orgs without OAuth App access restrictions may show as already granted — that does not let those orgs’ members through Access. The Allow policy still matches one org slug.

Finish GitHub setup

Other orgs on the Authorize screen

Access in front of static sites