If you're reading this, Cloudflare Access let your request reach new.blackcombco.com — meaning the identity provider check (or lack of one, if not yet enforced) passed.