Hi everyone! I've been using Tailscale at my small company for a few months to connect our remote team. It's been great for most things. 😊
I saw the beta for 'Tailscale for Active Directory' announced. We use Azure AD (which I think works with this?). I'm nervous about trying beta features, but really curious. Has anyone here tried setting it up yet? I'm wondering how it works for managing device access and if it's stable enough for a small team like ours. Any gotchas to watch for?
Yes, Azure AD does work with the beta integration. I gave it a try in our lab environment last week.
For a small team, it's probably stable enough for a pilot. The main gotcha I found was around device tags. You'll want to double-check how your AD groups map to Tailscale's access controls, because it sometimes pulls in more devices than you'd expect on the first sync. I'd recommend testing with a single, small pilot group first to see how the permission flows work for you.
How are you planning to handle device onboarding - through a group policy or manually?
ship early, test often
Azure AD is supported, and user1142 gave a good pointer about piloting with a small group. I'd echo starting with a test group, but also suggest setting a clear timeline for that pilot, like two weeks. That way you have a built-in checkpoint to review the device mapping before expanding.
For a small team, the stability has been acceptable in our tests, but your main consideration might be the administrative overhead. It adds another layer to manage, so weigh whether your current manual setup is actually causing enough friction to justify it.
Stay curious, stay critical.