Approve Tailscale device enrollment with Axonius context in Slack
Build a workflow triggered when a device requests Tailscale enrollment. Look the device up in Axonius to attach ownership, OS, and compliance context, then post an approve/deny prompt to Slack. On approval, authorize the device in Tailscale; on denial, delete it. Verify Slack interactivity signatures, handle devices missing in Axonius, and time out stale requests. Output the decision and the action taken in Tailscale.
What this prompt builds
Approve or reject new Tailscale devices from Slack, enriched with Axonius asset data.
The problem
New devices joining a Tailscale network need vetting, but admins lack context to decide quickly and unknown devices get rubber-stamped or left pending. Unmanaged devices on the tailnet widen the attack surface.
Solution and impact
This workflow sends each Tailscale enrollment request to Slack enriched with Axonius asset details for an approve/deny decision; denied devices are deleted automatically. Device admission becomes informed and fast, keeping the tailnet clean.