Multi user systems?

[s4s0l]

I have a machine that is used by multiple users. The machine is enrolled to tailnet by admin user. When using tsidp all of local users on that machine from tsidp perspective are this admin user. Is there a way to tell tsidp not to rely on connection and force tailscale.com login in browser for this specific machine? Downgrade to 'regular' oauth provider?

[b-]

There isn't, but if you tag the machine it will prevent logging in with tsidp, which at least will help prevent another user from logging in with your admin account.