Microsoft Entra ID access provisioning is now generally available

Today, we’re making user and group provisioning for Microsoft Entra ID generally available for Tailscale Enterprise plans. This release expands on the beta support for Microsoft System for Cross-domain Identity Management (SCIM) we shipped back in August. Since then, Azure Active Directory has evolved into Microsoft Entra ID, and we’ve evolved along with it.

Entra a whole new era of SCIM automation

The Tailscale and Microsoft Entra ID integration enables you to automate the process of creating new users to access your tailnet, removing users when they no longer need to have access, and more. By integrating Tailscale and Microsoft Entra ID, you can:

• Create users in Tailscale from Microsoft Entra ID
• Disable users in Microsoft Entra ID to suspend Tailscale access
• Delete users in Microsoft Entra ID to suspend them in Tailscale; such users are then automatically deleted from Tailscale in approximately 30 days
• Keep user attributes in sync between Microsoft Entra ID and Tailscale
• Provision groups and group attributes in Entra ID and push to Tailscale

Streamline onboarding/offboarding for your Microsoft environment

Manually onboarding and offboarding users across multiple platforms can be a time consuming and error-prone process. With Tailscale and Microsoft Entra ID, it becomes an automated and transparent function.

When configured, Microsoft Entra ID automatically provisions and deprovisions users and groups to Tailscale using the Microsoft Entra provisioning service. This means no duplicated efforts or inadvertent continued access to resources on your tailnet when a user is deleted. It also means faster ramp-up time as new users are automatically provisioned in Tailscale when added to Entra ID.

Get started with modernized user management today

Owners, Admins and IT Admins of Tailscale Enterprise plans can start using Entra ID for user provisioning today Check out the resources in the Tailscale Knowledge Base and Microsoft’s Tailscale provisioning tutorial to learn more about setting up and configuring the integration.