Join us in San Francisco for TailscaleUp!Grab your ticket ->

Setting up OneLogin to work with Tailscale

Last validated:

To enable your domain for OneLogin authentication, follow the steps below.

  1. In the OneLogin dashboard, go to Applications.

    • Select Add App

  2. Search for "OIDC" and select OpenID Connect (OIDC).

  3. Set the Display Name to "Tailscale."

    • Select Save.

  4. Under Configuration:

    • Add to Redirect URIs: https://login.tailscale.com/a/oauth_response
    • Select Save

  5. Under SSO:

    • Set Refresh Token Minutes to 40320 (4 weeks)
    • Select Save

  6. Switch your Tailscale identity provider to OneLogin. For information on how to do that, refer to Switch identity provider.

  7. Make sure all users you want to be able to log in are enabled for the Tailscale application in OneLogin.