{"slug":"deploy-tailscale-with-jumpcloud","title":"Deploy Tailscale with JumpCloud","tags":["tailscale"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Deploy Tailscale with JumpCloud\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nThis integrationis available for [the Standard, Premium, and Enterprise plans](https://tailscale.com/pricing).\r\n\r\nYou can use the [JumpCloud](https://jumpcloud.com/platform/mdm) mobile device management (MDM) solution to deploy Tailscale across your organization. JumpCloud lets you distribute and install Tailscale automatically on your fleet of devices. You can then configure a number of [system policies](https://tailscale.com/docs/features/tailscale-system-policies), and use JumpCloud to deploy these policies across the devices in your organization. Tailscale system policies set through JumpCloud are supported on Windows, macOS, iOS/tvOS, and Android.\r\n\r\nIf you need help deploying Tailscale using JumpCloud, or would like to suggest any feature enhancements, contact our [support](https://tailscale.com/contact/support#support-form) or [sales](https://tailscale.com/contact/sales) teams.\r\n\r\n## [Deploying Tailscale on macOS using JumpCloud](https://tailscale.com/docs/integrations/mdm/jumpcloud\\#deploying-tailscale-on-macos-using-jumpcloud)\r\n\r\nSee [Deploy Tailscale on macOS using MDM](https://tailscale.com/docs/integrations/mdm/mac) for general best practices and [Approve the Tailscale system extension automatically](https://tailscale.com/docs/integrations/mdm/mac#approve-the-tailscale-system-extension-automatically) to ensure the best end-user experience.\r\n\r\nTo deploy Tailscale to a fleet of Macs managed through JumpCloud, follow these steps. You'll first configure JumpCloud to fetch and distribute the Tailscale `.pkg` installer. Then, if needed, you'll be able to configure and deploy a set of system policies to customize the behavior of the Tailscale client according to the needs of your organization.\r\n\r\n### [Distributing the Standalone variant of the client](https://tailscale.com/docs/integrations/mdm/jumpcloud\\#distributing-the-standalone-variant-of-the-client)\r\n\r\nFollow these steps to add Tailscale to the deployable apps in the JumpCloud admin console:\r\n\r\n1. Log in to the JumpCloud admin console for your organization at `https://console.jumpcloud.com`.\r\n\r\n2. Select **Software Management** in the sidebar, and then select the **Apple** section to bring up your library of deployed macOS apps.\r\n\r\n3. Select the **+** button at the top-left to add a new app. Choose the **Self-hosted** option, which lets you define a new application by providing a URL to a `.pkg` installer.\r\n![The view to enter the software package URL in the JumpCloud MDM admin console.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmanaged-software-tailscale-pkg.960d2cc0.png&w=1080&q=75)\r\n4. In the **Software Description** field, enter **Tailscale**.\r\n\r\n5. In the **Software Package URL** field, enter the download URL for the Tailscale installer, such as `https://pkgs.tailscale.com/stable/Tailscale-1.76.1-macos.pkg`. To determine the URL to use, refer to our [packages server](https://pkgs.tailscale.com/stable/#macos) to find the latest available version of the client. Replace `1.76.1` with the current version number.\r\n\r\n\r\nDo not use the autoupdating `latest` download URL (`https://pkgs.tailscale.com/stable/Tailscale-latest-macos.pkg`). Although this download URL will work initially, it will break as soon as Tailscale releases an update.\r\n\r\nJumpCloud does not support URLs that reference changing `.pkg` file versions. When the `.pkg` file is updated from the original version configured in the JumpCloud admin console, package validation will fail.\r\n\r\n1. Select the **Validate** button to verify that JumpCloud is able to fetch the installer package. If successful, you'll find the version field populate with the version you chose.\r\n\r\nThen, assign the Tailscale app to a device or a group of devices:\r\n\r\n1. Select either the **Devices** or **Device Groups** sections, and select one or more device or device groups that you wish to deploy Tailscale on.\r\n\r\n2. Select **Save** to confirm the selection. After confirming, JumpCloud will begin to silently run the Tailscale `.pkg` installer on the devices or device groups you selected.\r\n\r\n\r\n### [Deploying system policies on macOS using JumpCloud](https://tailscale.com/docs/integrations/mdm/jumpcloud\\#deploying-system-policies-on-macos-using-jumpcloud)\r\n\r\nWe suggest reading the [system policies](https://tailscale.com/docs/features/tailscale-system-policies) topic to identify configuration options suitable for your organization. Once you know which policies you want to deploy to your fleet of devices, follow these steps to define them in JumpCloud:\r\n\r\n1. Log in to the JumpCloud admin console for your organization at `https://console.jumpcloud.com`.\r\n\r\n2. Select the **Policy Management** section in the sidebar.\r\n\r\n3. Select the **+** button at the top-left of the screen to add a new policy. In the modal window that appears, choose **Mac**.\r\n\r\n4. In the list of available policy types, choose **MDM Custom Configuration Profile**, which will let you upload a custom `.mobileconfig` file.\r\n![The view to choose a policy type in the JumpCloud MDM admin console.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolicy-types.45dbd053.png&w=1080&q=75)\r\n5. Choose a descriptive policy name and description (optional). For instance, `Tailscale System Policies`.\r\n![The view to choose a profile title and description in the JumpCloud MDM admin console.](https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmobileconfig-title.b7d9225a.png&w=1080&q=75)\r\n6. In the **Mobile Configuration File** section, upload a `.mobileconfig` file containing your policies. You may find an example within [our macOS MDM setup guide](https://tailscale.com/docs/integrations/mdm/mac).\r\n\r\n7. Assign the policies to a group of devices or one or more device by selecting items in the **Device Groups** or **Devices** section respectively.\r\n\r\n8. Select **Save** to save the policies. JumpCloud will begin deploying the configuration profile to selected devices momentarily. The Tailscale client must be restarted in order for all policies to be applied.\r\n\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Deploy Tailscale with JumpCloud</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>This integrationis available for <a href=\"https://tailscale.com/pricing\">the Standard, Premium, and Enterprise plans</a>.</p>\n<p>You can use the <a href=\"https://jumpcloud.com/platform/mdm\">JumpCloud</a> mobile device management (MDM) solution to deploy Tailscale across your organization. JumpCloud lets you distribute and install Tailscale automatically on your fleet of devices. You can then configure a number of <a href=\"https://tailscale.com/docs/features/tailscale-system-policies\">system policies</a>, and use JumpCloud to deploy these policies across the devices in your organization. Tailscale system policies set through JumpCloud are supported on Windows, macOS, iOS/tvOS, and Android.</p>\n<p>If you need help deploying Tailscale using JumpCloud, or would like to suggest any feature enhancements, contact our <a href=\"https://tailscale.com/contact/support#support-form\">support</a> or <a href=\"https://tailscale.com/contact/sales\">sales</a> teams.</p>\n<h2><a href=\"https://tailscale.com/docs/integrations/mdm/jumpcloud#deploying-tailscale-on-macos-using-jumpcloud\">Deploying Tailscale on macOS using JumpCloud</a></h2>\n<p>See <a href=\"https://tailscale.com/docs/integrations/mdm/mac\">Deploy Tailscale on macOS using MDM</a> for general best practices and <a href=\"https://tailscale.com/docs/integrations/mdm/mac#approve-the-tailscale-system-extension-automatically\">Approve the Tailscale system extension automatically</a> to ensure the best end-user experience.</p>\n<p>To deploy Tailscale to a fleet of Macs managed through JumpCloud, follow these steps. You'll first configure JumpCloud to fetch and distribute the Tailscale <code>.pkg</code> installer. Then, if needed, you'll be able to configure and deploy a set of system policies to customize the behavior of the Tailscale client according to the needs of your organization.</p>\n<h3><a href=\"https://tailscale.com/docs/integrations/mdm/jumpcloud#distributing-the-standalone-variant-of-the-client\">Distributing the Standalone variant of the client</a></h3>\n<p>Follow these steps to add Tailscale to the deployable apps in the JumpCloud admin console:</p>\n<ol>\n<li>\n<p>Log in to the JumpCloud admin console for your organization at <code>https://console.jumpcloud.com</code>.</p>\n</li>\n<li>\n<p>Select <strong>Software Management</strong> in the sidebar, and then select the <strong>Apple</strong> section to bring up your library of deployed macOS apps.</p>\n</li>\n<li>\n<p>Select the <strong>+</strong> button at the top-left to add a new app. Choose the <strong>Self-hosted</strong> option, which lets you define a new application by providing a URL to a <code>.pkg</code> installer.\r\n<img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmanaged-software-tailscale-pkg.960d2cc0.png&#x26;w=1080&#x26;q=75\" alt=\"The view to enter the software package URL in the JumpCloud MDM admin console.\"></p>\n</li>\n<li>\n<p>In the <strong>Software Description</strong> field, enter <strong>Tailscale</strong>.</p>\n</li>\n<li>\n<p>In the <strong>Software Package URL</strong> field, enter the download URL for the Tailscale installer, such as <code>https://pkgs.tailscale.com/stable/Tailscale-1.76.1-macos.pkg</code>. To determine the URL to use, refer to our <a href=\"https://pkgs.tailscale.com/stable/#macos\">packages server</a> to find the latest available version of the client. Replace <code>1.76.1</code> with the current version number.</p>\n</li>\n</ol>\n<p>Do not use the autoupdating <code>latest</code> download URL (<code>https://pkgs.tailscale.com/stable/Tailscale-latest-macos.pkg</code>). Although this download URL will work initially, it will break as soon as Tailscale releases an update.</p>\n<p>JumpCloud does not support URLs that reference changing <code>.pkg</code> file versions. When the <code>.pkg</code> file is updated from the original version configured in the JumpCloud admin console, package validation will fail.</p>\n<ol>\n<li>Select the <strong>Validate</strong> button to verify that JumpCloud is able to fetch the installer package. If successful, you'll find the version field populate with the version you chose.</li>\n</ol>\n<p>Then, assign the Tailscale app to a device or a group of devices:</p>\n<ol>\n<li>\n<p>Select either the <strong>Devices</strong> or <strong>Device Groups</strong> sections, and select one or more device or device groups that you wish to deploy Tailscale on.</p>\n</li>\n<li>\n<p>Select <strong>Save</strong> to confirm the selection. After confirming, JumpCloud will begin to silently run the Tailscale <code>.pkg</code> installer on the devices or device groups you selected.</p>\n</li>\n</ol>\n<h3><a href=\"https://tailscale.com/docs/integrations/mdm/jumpcloud#deploying-system-policies-on-macos-using-jumpcloud\">Deploying system policies on macOS using JumpCloud</a></h3>\n<p>We suggest reading the <a href=\"https://tailscale.com/docs/features/tailscale-system-policies\">system policies</a> topic to identify configuration options suitable for your organization. Once you know which policies you want to deploy to your fleet of devices, follow these steps to define them in JumpCloud:</p>\n<ol>\n<li>\n<p>Log in to the JumpCloud admin console for your organization at <code>https://console.jumpcloud.com</code>.</p>\n</li>\n<li>\n<p>Select the <strong>Policy Management</strong> section in the sidebar.</p>\n</li>\n<li>\n<p>Select the <strong>+</strong> button at the top-left of the screen to add a new policy. In the modal window that appears, choose <strong>Mac</strong>.</p>\n</li>\n<li>\n<p>In the list of available policy types, choose <strong>MDM Custom Configuration Profile</strong>, which will let you upload a custom <code>.mobileconfig</code> file.\r\n<img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpolicy-types.45dbd053.png&#x26;w=1080&#x26;q=75\" alt=\"The view to choose a policy type in the JumpCloud MDM admin console.\"></p>\n</li>\n<li>\n<p>Choose a descriptive policy name and description (optional). For instance, <code>Tailscale System Policies</code>.\r\n<img src=\"https://tailscale.com/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fmobileconfig-title.b7d9225a.png&#x26;w=1080&#x26;q=75\" alt=\"The view to choose a profile title and description in the JumpCloud MDM admin console.\"></p>\n</li>\n<li>\n<p>In the <strong>Mobile Configuration File</strong> section, upload a <code>.mobileconfig</code> file containing your policies. You may find an example within <a href=\"https://tailscale.com/docs/integrations/mdm/mac\">our macOS MDM setup guide</a>.</p>\n</li>\n<li>\n<p>Assign the policies to a group of devices or one or more device by selecting items in the <strong>Device Groups</strong> or <strong>Devices</strong> section respectively.</p>\n</li>\n<li>\n<p>Select <strong>Save</strong> to save the policies. JumpCloud will begin deploying the configuration profile to selected devices momentarily. The Tailscale client must be restarted in order for all policies to be applied.</p>\n</li>\n</ol>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}