Comment by gausswho
Pretty rich coming from a company that only let's you create an account via SSO from the largest offenders of this.
Pretty rich coming from a company that only let's you create an account via SSO from the largest offenders of this.
I set up Authentik[^1] on my NAS in a docker container and went from there! Just had to add a .well-known webfinger file to my domain that pointed to the Authentik instance and it "just worked" with Tailscale.
[^1]: https://goauthentik.io/
and also requires you to relogin every so often (to be fair it's 90 days not 24h)
and you can just use a custom OIDC IDP with tailscale, for all 15 of us that have custom OIDC IDPs