Overview

Torii integrates with Tailscale and syncs:

• Users, including their role, status and last seen time.
• License type: Tailscale.
• You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

To connect this integration, we require the following:

Accounts & Permissions

• Any Tailscale plan. API access is included in every plan, including the free Personal plan.
• A Tailscale user with the Owner, Admin, Network admin or IT admin role, to create the OAuth client.
• To use the Invite user action, an Owner, Admin or IT admin user is needed to create the API access token.

Required keys

• Client ID
• Client Secret
• API access token (optional): only needed for the Invite user action.

How to Generate the Required Values

Step 1: Create an OAuth client

1. Sign in to the Tailscale admin console.
2. Go to Settings >> Trust credentials.
3. Click Credential, then select OAuth.
4. Under Users, select Read. This is the only permission needed to sync users. Select Write as well only if you want to use the Delete user or Change role actions.
5. Click Generate credential.
6. Copy the Client ID and the Client secret from the Credential created page, then click Done.

Step 2 (Optional): Generate an API access token

Only needed if you want to use the Invite user action. Tailscale only allows invites with a token that belongs to a user.

1. In the Tailscale admin console, go to Settings >> Keys.
2. Click Generate access token.
3. Choose the number of days until the token expires (1 to 90 days) and generate it.
4. Copy the token.

The token must be created by an Owner, Admin or IT admin user. It expires after the number of days you chose, and Invite user will stop working until you create a new token and enter it in Torii.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for Tailscale and click Connect.
3. Enter the Client ID and Client Secret. To use the Invite user action, also enter the API access token (optional).
4. Click Connect.

Actions

The following actions are available:

• Invite user - invites a user to your tailnet with the role you choose. Requires the optional API access token.
• Delete user - removes a user from your tailnet. The Owner cannot be deleted. Requires the OAuth client to have the Users Write permission.
• Change role - changes a user's role. Requires the OAuth client to have the Users Write permission. Some roles need a Tailscale Standard, Premium or Enterprise plan.

For any further questions, please contact Torii Support.