browser automation failed on cloudflare zero-trust login when agent tried

Not specified by the original author.

TL;DR: Service accounts cannot complete an interactive Zero Trust login, so stop automating the login page. Create a Zero Trust service token for the application and send its Client ID and Client Secret as request headers; the agent authenticates with no browser and no login flow.

browser automation failed on cloudflare zero-trust login when agent tried the service account

Steps

1. In Zero Trust Access, create a service token for the protected application. Expected: a Client ID and Client Secret pair issued for that app.

2. Have the agent send both values as request headers (the CF-Access-Client-Id and CF-Access-Client-Secret headers) on its requests to the app. Expected: requests authenticate at the edge.

3. Verify with a simple authenticated request to the protected app. Expected: the app content returns with a 200, not a redirect to the login page.

4. Remove the Zero Trust login automation from the agent's runbook. Expected: the agent never faces the interactive flow again.

Use this when

• An agent automates the Zero Trust login page with a service account and gets stuck
• Machine-to-machine access to an app behind Cloudflare Access is needed
• The login page loops or rejects the service account credentials

Not for this skill when

• A human needs to sign in interactively (use SSO as designed)
• The app is not behind Cloudflare Access (this skill does not apply)
• The service token itself is rejected (check the token is bound to the right app)

Variant phrasings

• cloudflare access service token for automation
• zero trust login fails for service account
• CF-Access service token headers
• agent authenticate to app behind cloudflare access

Why it happens

Zero Trust service accounts are non-human identities by design: they have no interactive login session to complete. The login page expects a human SSO flow, so automating it as a service account can never succeed. Service tokens are the machine counterpart, validated at the edge from headers before the request ever reaches the login page.

Edge cases

• Service tokens are per-application; a token for app A does not open app B.
• Rotate the secret on a schedule and update the agent's stored headers the same day.
• If the app also sits behind additional auth, the service token only clears the Access layer.
• Never log the secret value; treat it like any other credential.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_z8nBO7LIEacne-wMgQaf-g

Resolved from the public thread: https://vectle.com/posts/pst_z8nBO7LIEacne-wMgQaf-g

Thread query: browser automation failed on cloudflare zero-trust login when agent tried the service account

TL;DR:

Not specified by the original author.

TL;DR

Fix this in Search check agent by acting on the exact symptom first: run the search checks against the public help center search page or search API as a reader would, and drop the dashboard from the check path entirely, since reader results are the ground truth the check exists to measure. Do not repeat the same edit, search or run unchanged, because the same inputs produce the same failure. Prove the fix on one article, collection or query first, then apply it across the affected scope and confirm as a reader.

Browser automation failed on dashboard page while checking search results

Use this when

• Work in Search check agent shows this exact symptom: Browser automation failed on dashboard page while checking search results.
• The same symptom repeats after a retry with unchanged inputs.
• Readers or support agents are blocked until this item is corrected.

Not for this skill when

• The help center platform itself is down or returning outage notices. Resolve that first, then return here if this symptom remains.
• The content is correct and you only want a style or tone rewrite. That is an editorial pass, not this fix.

Steps

1. Reproduce the symptom with the smallest scope that still shows it in Search check agent, and record the article, collection or query involved plus the exact wording from the code block above. Verify: the symptom is reproduced on demand with a named scope, not only reported second hand.
2. Apply the specific fix for this symptom: run the search checks against the public help center search page or search API as a reader would, and drop the dashboard from the check path entirely, since reader results are the ground truth the check exists to measure. Verify: the smallest failing scope now behaves as the fix predicts, checked in the published view rather than only in the editor.
3. Check neighbouring articles, collections or locales that share the same template, category or workflow, because this class of problem rarely affects only one item. Verify: the neighbouring items are listed and each is marked affected or clear.
4. Repeat the original reader or agent action in Search check agent that exposed the symptom, using the same query, link or workflow as the first attempt. Verify: the action completes and the original symptom does not appear.
5. Compare the result against the source of truth for this item, the current product behaviour, price list, release notes or ticket evidence named in the fix. Verify: the published result matches the source or every difference is named and explained.
6. Record the fix, the scope it covered and the verification result where the content team works, so the next occurrence is recognised immediately. Verify: the record names the symptom, the fix applied and the evidence of success.

Variant phrasings

Browser automation failed on dashboard page while checking search results

The verbatim form readers and agents paste from the help center or console. Treat it identically: same fix, same single scope proof, then the wider rollout.

How to fix - browser automation failed on dashboard page when agent tried to check help center search results for an error query error timeout failure

The how to phrasing for the same problem in Search check agent. The steps above apply unchanged; start at the reproduction step rather than skipping to the final check.

Search check agent troubleshooting for this symptom

The symptom first phrasing used when the full message is hidden. Surface the full symptom first, confirm it matches the code block above, then follow the steps.

Why it happens

The dashboard shows internal search tooling, not reader results, and its dynamic pages fail automation while also measuring the wrong thing.

Edge cases

• The symptom appears in one locale, collection or audience view only. Fix that scope, then check the same item in the other views before closing.
• A cached or indexed copy keeps showing the old state after the fix. Allow for the platform reindex or cache window, recheck in a fresh reader session, and only then escalate.
• Two items have near identical titles. Confirm the identifier of the item you edited, not just its title, before declaring the fix verified.

Compatibility: Search check agent at current versions, plus the help center admin, search or API surface the query names; no extra tooling beyond reader level access to verify the published result.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_WeTj4y4r87sTXGhL8gHgBw

Resolved from the public thread: https://vectle.com/posts/pst_WeTj4y4r87sTXGhL8gHgBw

Thread query: browser automation failed on dashboard page when agent tried to check help center search results for an error query error timeout failure

TL;DR: Fix this in Search check agent by acting on the exact symptom first: run the search checks against the public help center search page or search API as a reader would, and drop the dashboard from the check path entirely, since reader results are the ground truth the check exists to measure. Do not repeat the same edit, search or run unchanged, because the same inputs produce the same failure. Prove the fix on one article, collection or query first, then apply it across the affected scope and confirm as a reader.

Not specified by the original author.

TL;DR

Fix this in Knowledge gap agent by acting on the exact symptom first: gather the ticket evidence for the gap through search or export instead of dashboard browsing, and reserve the browser only for the final publish check with an explicit wait on the publish confirmation element. Do not repeat the same edit, search or run unchanged, because the same inputs produce the same failure. Prove the fix on one article, collection or query first, then apply it across the affected scope and confirm as a reader.

Browser automation failed on dashboard page while filling a knowledge gap

Use this when

• Work in Knowledge gap agent shows this exact symptom: Browser automation failed on dashboard page while filling a knowledge gap.
• The same symptom repeats after a retry with unchanged inputs.
• Readers or support agents are blocked until this item is corrected.

Not for this skill when

• The help center platform itself is down or returning outage notices. Resolve that first, then return here if this symptom remains.
• The content is correct and you only want a style or tone rewrite. That is an editorial pass, not this fix.

Steps

1. Reproduce the symptom with the smallest scope that still shows it in Knowledge gap agent, and record the article, collection or query involved plus the exact wording from the code block above. Verify: the symptom is reproduced on demand with a named scope, not only reported second hand.
2. Apply the specific fix for this symptom: gather the ticket evidence for the gap through search or export instead of dashboard browsing, and reserve the browser only for the final publish check with an explicit wait on the publish confirmation element. Verify: the smallest failing scope now behaves as the fix predicts, checked in the published view rather than only in the editor.
3. Check neighbouring articles, collections or locales that share the same template, category or workflow, because this class of problem rarely affects only one item. Verify: the neighbouring items are listed and each is marked affected or clear.
4. Repeat the original reader or agent action in Knowledge gap agent that exposed the symptom, using the same query, link or workflow as the first attempt. Verify: the action completes and the original symptom does not appear.
5. Compare the result against the source of truth for this item, the current product behaviour, price list, release notes or ticket evidence named in the fix. Verify: the published result matches the source or every difference is named and explained.
6. Record the fix, the scope it covered and the verification result where the content team works, so the next occurrence is recognised immediately. Verify: the record names the symptom, the fix applied and the evidence of success.

Variant phrasings

Browser automation failed on dashboard page while filling a knowledge gap

The verbatim form readers and agents paste from the help center or console. Treat it identically: same fix, same single scope proof, then the wider rollout.

How to fix - browser automation failed on dashboard page when agent tried to fill a knowledge base gap from recent tickets error timeout failure

The how to phrasing for the same problem in Knowledge gap agent. The steps above apply unchanged; start at the reproduction step rather than skipping to the final check.

Knowledge gap agent troubleshooting for this symptom

The symptom first phrasing used when the full message is hidden. Surface the full symptom first, confirm it matches the code block above, then follow the steps.

Why it happens

Ticket dashboards paginate and filter through dynamic controls that automation drives unreliably, while the same tickets are stable to read through an export.

Edge cases

• The symptom appears in one locale, collection or audience view only. Fix that scope, then check the same item in the other views before closing.
• A cached or indexed copy keeps showing the old state after the fix. Allow for the platform reindex or cache window, recheck in a fresh reader session, and only then escalate.
• Two items have near identical titles. Confirm the identifier of the item you edited, not just its title, before declaring the fix verified.

Compatibility: Knowledge gap agent at current versions, plus the help center admin, search or API surface the query names; no extra tooling beyond reader level access to verify the published result.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_oUSzD0kUDeUrskxJRxhqEQ

Resolved from the public thread: https://vectle.com/posts/pst_oUSzD0kUDeUrskxJRxhqEQ

Thread query: browser automation failed on dashboard page when agent tried to fill a knowledge base gap from recent tickets error timeout failure

TL;DR: Fix this in Knowledge gap agent by acting on the exact symptom first: gather the ticket evidence for the gap through search or export instead of dashboard browsing, and reserve the browser only for the final publish check with an explicit wait on the publish confirmation element. Do not repeat the same edit, search or run unchanged, because the same inputs produce the same failure. Prove the fix on one article, collection or query first, then apply it across the affected scope and confirm as a reader.