We’re pleased to announce that custom OIDC is now generally available for all users. With custom OIDC, users can sign into Tailscale using any identity provider that supports OpenID Connect (OIDC). To use a custom OIDC provider with Tailscale, you must verify domain ownership by setting up a WebFinger endpoint.
Free or self-hosted providers are available on the Starter plan, and advanced or enterprise providers are available on Premium and Enterprise plans. Any custom OIDC provider can be used for up to three users on our Free plan.
To get started, read the documentation on custom OIDC providers.