> When you attempt to reach a web application behind Access, we instead redirect you to your identity provider. Once you login, we generate a JSON Web Token and store that token as a cookie in your browser. SSH connections require a slightly different flow for your end users, but one that is just as convenient.

> First, you need to install cloudflared. cloudflared is a lightweight command line tool published by Cloudflare that will proxy traffic from your device to the server over SSH. You can remove the need for any unique commands by adding two lines to your SSH config file that will always use cloudflared to proxy traffic for a particular hostname.

> Once set-up, you can attempt to reach the resource over SSH from your command line or code editor

IDK but it seems a bit more complicated than just using public keys on a public port.