Tunnel configuration based on tag Completed
Adding the ability to apply tunnel configuration based on tags would be very convenient to have.
In an Entra ID synced environment where all users belong to the same Timus “Microsoft Entra ID Users” team, being able to dynamically apply the tunnel configuration based on Timus tag would mean we could apply the tunnel config based on Entra ID group membership since synced groups automatically apply a tag corresponding to the group name.
In this use case, as an example, if a user is going to be overseas or in an known insecure location, swapping them into a pre-defined Entra group, for example, could then subsequently change their Timus tunnel configuration profile to a tunnel all vs split tunnel configuration without having to get into Timus and make the change manually.
Comments
7 comments
We're happy to share that Tag-based Tunnel Assignment has been implemented and is now available. You can review the details in our latest release notes here. Feel free to reach out if you have any questions.
I have an open ticket on this: “Different Tunnel Configuration for Teams based on tags” (883)
The update from 8 days ago was:
Hopefully they will address it, it is a big miss. In part because the normal mechanism would be to use a team to set the tunnel policy, and you can create a team based on a user tag, but you cannot do that with synced users:
Timus, Please fix the ability to put synced users into custom teams, or support assigning tunnel configurations based on tags.
Planned - Q3.
Here is the latest update: We're glad to confirm it's on our roadmap for this year. We'll be implementing tags in tunnel configurations and will keep you updated as things move forward. Thank you for the feedback!
Eda Ercan - Your latest post on this (3 Days ago) - I have a question:
First of all, Thank you! This has been something I have been following / tracking so good to know its coming. My question is just that: It's not available "yet but after 4/26 as that is when the Release Note(s) date is, correct? 2nd Part: Has Support documentation been updated to show illustrate these new features of tagging?
Our issue that I am trying to make sure this new request handles is…. I sync users from Entra so they get a tag, and that - today, only allows me to assign a Tunnel Config to all, but I have a need for my technicians to be different than my non-technicians, so I assume I can a Global one to the “Entra” tagged (everyone), but then also go in, make a new one, and apply it to a new synced tag and have that apply also?
Hey Aaron Ward ,
This feature is currently live. It came with the 2.0.3 version which published in April 2026. We've updated the knowledge base article, you can check it here.
Microsoft Entra ID groups are assigned to users as tags, allowing you to create separate split-tunnel configurations based on those specific tags. To apply a configuration to every user synced with Entra ID, select the “Microsoft Entra ID Users” team as the source. Please contact our support team if you require further assistance.
Thanks Eray Dogan - I have confirmed it works! Fancy 👠! 👠
Please sign in to leave a comment.