WARP enrollment says 'request is invalid' — how to fix?

This means Cloudflare doesn't have an enrollment policy that allows your device. The admin needs to create one: 1. Go to dash.cloudflare.com → Zero Trust 2. Settings → WARP Client (or Devices → Device enrollment) 3. Click 'Manage' under Device enrollment permissions 4. Add a rule: Selector = 'Emails ending in', Value = '@yourcompany.com', Action = Allow 5. Save Then try enrolling in WARP again. If you're using one-time PIN authentication, make sure the email you're authenticating with matches the rule you created.