{"slug":"setting-up-onelogin-to-work-with-tailscale","title":"Setting up OneLogin to work with Tailscale","tags":["tailscale","auth","logging"],"agent_summary":"Last validated: Jul 8, 2024","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Setting up OneLogin to work with Tailscale\r\n\r\nLast validated: Jul 8, 2024\r\n\r\nYou will have to contact us to\r\nenable your domain for OneLogin authentication, following the steps below. We are actively working to make\r\nthis process more automated.\r\n\r\n1. In the OneLogin dashboard, go to _Applications_.\r\n   - Select **Add App**\r\n2. Search for \"OIDC\" and select **OpenID Connect (OIDC).**\r\n\r\n3. Set the _Display Name_ to \"Tailscale.\"\r\n   - Select **Save.**\r\n4. Under _Configuration_:\r\n   - Add to _Redirect URIs_: `https://login.tailscale.com/a/oauth_response`\r\n   - Select **Save**\r\n5. Under _SSO_:\r\n   - Set _Refresh Token Minutes_ to **40320** (4 weeks)\r\n   - Select **Save**\r\n6. When done, fill out the [Identity provider configuration or change](https://tailscale.com/contact/support?type=sso) section of the support form.\r\n\r\n7. Make sure all users you want to be able to log in are enabled for the\r\nTailscale application in OneLogin.\r\n\r\n\r\nAfter you send us your OneLogin app information, note that it may take up to\r\ntwo business days to activate your domain.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Setting up OneLogin to work with Tailscale</h1>\n<p>Last validated: Jul 8, 2024</p>\n<p>You will have to contact us to\r\nenable your domain for OneLogin authentication, following the steps below. We are actively working to make\r\nthis process more automated.</p>\n<ol>\n<li>\n<p>In the OneLogin dashboard, go to <em>Applications</em>.</p>\n<ul>\n<li>Select <strong>Add App</strong></li>\n</ul>\n</li>\n<li>\n<p>Search for \"OIDC\" and select <strong>OpenID Connect (OIDC).</strong></p>\n</li>\n<li>\n<p>Set the <em>Display Name</em> to \"Tailscale.\"</p>\n<ul>\n<li>Select <strong>Save.</strong></li>\n</ul>\n</li>\n<li>\n<p>Under <em>Configuration</em>:</p>\n<ul>\n<li>Add to <em>Redirect URIs</em>: <code>https://login.tailscale.com/a/oauth_response</code></li>\n<li>Select <strong>Save</strong></li>\n</ul>\n</li>\n<li>\n<p>Under <em>SSO</em>:</p>\n<ul>\n<li>Set <em>Refresh Token Minutes</em> to <strong>40320</strong> (4 weeks)</li>\n<li>Select <strong>Save</strong></li>\n</ul>\n</li>\n<li>\n<p>When done, fill out the <a href=\"https://tailscale.com/contact/support?type=sso\">Identity provider configuration or change</a> section of the support form.</p>\n</li>\n<li>\n<p>Make sure all users you want to be able to log in are enabled for the\r\nTailscale application in OneLogin.</p>\n</li>\n</ol>\n<p>After you send us your OneLogin app information, note that it may take up to\r\ntwo business days to activate your domain.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}