Skip to main content

Tailscale SCIM Key

Description

General

  • Documentation: https://tailscale.com/learn/what-is-scim/
  • Summary: Tailscale is a zero-configuration virtual private network (VPN) solution, making it simple to create secure networks between computers, servers, and cloud instances. A SCIM API key allows the customer to authenticate an identity provider, such as Microsoft Entra ID and Okta, and the tailnet for user & group provisioning.
  • IPs allowlist: IP allowlists (or Block lists) are possible, see Tailscale IP Block lists.
  • Scopes: This key grants access to applications in the tailnet using the Tailscale API.

Revoke the secret

The SCIM API key can be revoked in the User management page of the admin console, and click Manage keys. In the Provisioning keys dialog, click Revoke.

Check for suspicious activity

Keys and secrets activity can be monitored in the Logs page of the Tailscale admin consoles.

Details for Tailscale scim key

  • Family: Api

  • Category: Remote access

  • Company: Tailscale

  • High recall: True

  • Validity check available: True

  • On-premise instances exist: False

  • Only valid secrets raise an alert: False

  • Minimum number of matches: 1

  • Occurrences found for one million commits: very rare

  • Prefixed: True

  • PreValidators:

- type: ContentWhitelistPreValidator
patterns:
- tskey-scim-

Examples

- text: "+TAILSCALE_SCIM_KEY = 'tskey-scim-k1HrMT4FkgX7-DkZMwZ89v77AkJCVCBgxiTvUAfAGmISiG'"
apikey: tskey-scim-k1HrMT4FkgX7-DkZMwZ89v77AkJCVCBgxiTvUAfAGmISiG

# Fat-fingered secret
- text: Xtskey-scim-k1HrMT4FkgX7-DkZMwZ89v77AkJCVCBgxiTvUAfAGmISiG
apikey: tskey-scim-k1HrMT4FkgX7-DkZMwZ89v77AkJCVCBgxiTvUAfAGmISiG

How can I help you ?