Custom OIDC is generally available

Custom OpenID Connect (OIDC) is now available for all Tailscale users, allowing them to sign in using any identity provider that supports OIDC. To utilize a custom OIDC provider, users must verify domain ownership by setting up a WebFinger endpoint. The Starter plan includes access to free or self-hosted providers, while advanced or enterprise providers are available through the Premium and Enterprise plans. On the Free plan, any custom OIDC provider can be used for up to three users, and users are encouraged to consult the documentation to get started.