{"id":74971,"date":"2023-06-05T13:09:32","date_gmt":"2023-06-05T17:09:32","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=74971"},"modified":"2024-06-21T12:36:45","modified_gmt":"2024-06-21T16:36:45","slug":"get-started-radius","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/get-started-radius","title":{"rendered":"Get Started: RADIUS"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>JumpCloud RADIUS lets users securely authenticate their devices to WiFi, VPN, or other supported networks using JumpCloud. There are 3 available RADIUS configurations at JumpCloud that vary in complexity based on your preferred authentication method. With password-based authentication, users authenticate with the same credentials they use to access their other JumpCloud-protected resources (for example, the JumpCloud User Portal and SSO applications).<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Password-based authentication is the default authentication method for JumpCloud RADIUS.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>JumpCloud supports the following RADIUS configurations, differentiated by the method with which users authenticate on their devices:<\/p>\n\n\n\n<ul>\n<li><strong>Password-based authentication<\/strong> <strong>(WiFi or VPN)<\/strong>\n<ul>\n<li>Users authenticate to networks with their JumpCloud username or email address and password.<\/li>\n\n\n\n<li>Reduces the need for additional configuration on end-user devices.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Passwordless-based authentication (WiFi)<\/strong>\n<ul>\n<li>AKA certificate-based authentication (CBA); this authentication method for RADIUS requires additional configuration steps to connect end-user devices to networks.<\/li>\n\n\n\n<li>This method requires devices to connect using EAP-TLS. <\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Delegated authentication with Entra ID<\/strong> <strong>(WiFi)<\/strong>\n<ul>\n<li>Use JumpCloud RADIUS solely as the authentication server and maintain Entra ID as the identity provider (IdP).<\/li>\n\n\n\n<li>Delegated auth is still password-based, but user credentials are managed in Entra ID.<\/li>\n\n\n\n<li>This method requires devices to connect using EAP-TTLS\/PAP. <\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>For more information about the RADIUS protocol and JumpCloud\u2019s implementation, see <a href=\"https:\/\/jumpcloud.com\/support\/overview-of-radius-as-a-service\" target=\"_blank\" rel=\"noreferrer noopener\">Overview of RADIUS-as-a-Service.<\/a> <\/li>\n\n\n\n<li>For in-depth technical details such as supported protocols and MFA support, see <a href=\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\" target=\"_blank\" rel=\"noreferrer noopener\">RADIUS Technical Considerations and Protocol Support<\/a>.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring JumpCloud RADIUS<\/h2>\n\n\n\n<p>Configuring JumpCloud RADIUS involves multiple steps including the JumpCloud configuration, the networking equipment configuration, and potentially the end-user device configuration depending on your chosen solution within your environment. The following serves as an overview of the process:<\/p>\n\n\n\n<ol>\n<li class=\"enter is-lower-alpha\">Select the RADIUS configuration appropriate for your environment:\n<ol class=\"enter is-lower-alpha\">\n<li>Password<\/li>\n\n\n\n<li>Passwordless \/ CBA&nbsp;<\/li>\n\n\n\n<li>Delegated Auth with Entra ID&nbsp;<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Based on your preferred authentication method, configure your JumpCloud RADIUS server:\n<ol class=\"enter is-lower-alpha\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/radius-configuration-and-authentication\" target=\"_blank\" rel=\"noreferrer noopener\">Configure JumpCloud RADIUS with Password-Based Authentication<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/certificate-based-authentication-to-radius-for-admins\" target=\"_blank\" rel=\"noreferrer noopener\">Configure JumpCloud RADIUS with Passwordless\/ CBA<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/authenticate-to-radius-with-azure-ad\" target=\"_blank\" rel=\"noreferrer noopener\">Configure JumpCloud RADIUS with Delegated Auth for Entra ID<\/a><\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Next, configure your network hardware to use the JumpCloud RADIUS server:\n<ol class=\"enter is-lower-alpha\">\n<li>For generic configuration applicable to multiple vendors:\n<ol class=\"enter is-lower-roman\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-a-wap-vpn-or-router-for-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure a WAP, VPN, or Router for RADIUS<\/a><\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Vendor specific configurations:\n<ol class=\"enter is-lower-roman\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-fortigate-to-use-cloud-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Fortigate VPN to use Cloud RADIUS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-ubiquiti-unifi-wap-to-use-cloud-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Ubiquiti UniFi WAP to use Cloud RADIUS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-cisco-meraki-wap-to-use-cloud-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Cisco Meraki WAP to Use Cloud RADIUS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-ruckus-smartzone-to-use-cloud-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure Ruckus SmartZone to Use Cloud RADIUS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-openvpn-access-server-cloud-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure OpenVPN Access Server to Use Cloud RADIUS<\/a><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Lastly, configure your endpoints to connect using JC RADIUS:<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li><strong>WiFi<\/strong>: if you selected Password-based authentication, no further configuration should be necessary. Users will connect from their end-user devices with JumpCloud credentials and will not require any additional configuration on their end-user devices. See <a href=\"https:\/\/jumpcloud.com\/support\/configure-your-wifi-clients-to-use-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure your WiFi Clients to use RADIUS<\/a> for more information.<\/li>\n\n\n\n<li><strong>VPN<\/strong>: if you selected Password-based authentication, any additional configuration between your VPN service and your end-user device is required based on the specifics of your vendor.  &nbsp;<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"5\">\n<li>If you selected Passwordless-based authentication \/ CBA, see the following information:\n<ol class=\"enter is-lower-alpha\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/radius-certificate-example-scripts\" target=\"_blank\" rel=\"noreferrer noopener\">Configure EAP-TLS for RADIUS using Certificate Example Scripts<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/certificate-based-authentication-to-radius-for-users\" target=\"_blank\" rel=\"noreferrer noopener\">Certificate Based Authentication to RADIUS<\/a><\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>If you selected Delegated Authentication with Entra ID, configure your endpoints to use EAP-TTLS\/PAP:\n<ol class=\"enter is-lower-alpha\">\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-mac-ios-for-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure EAP-TTLS\/PAP on Mac &amp; iOS for RADIUS&nbsp;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-windows-for-radius\" target=\"_blank\" rel=\"noreferrer noopener\">Configure EAP-TTLS\/PAP on Windows for RADIUS<\/a><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Overview JumpCloud RADIUS lets users securely authenticate their devices to WiFi, VPN, or other supported networks using JumpCloud. There are [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2845,2897],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Get Started: RADIUS - JumpCloud<\/title>\n<meta name=\"description\" content=\"Discover how to get started with RADIUS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/get-started-radius\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Get Started: RADIUS\" \/>\n<meta property=\"og:description\" content=\"Discover how to get started with RADIUS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/get-started-radius\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-21T16:36:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/get-started-radius\",\"url\":\"https:\/\/jumpcloud.com\/support\/get-started-radius\",\"name\":\"Get Started: RADIUS - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:32+00:00\",\"dateModified\":\"2024-06-21T16:36:45+00:00\",\"description\":\"Discover how to get started with RADIUS.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/get-started-radius#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/get-started-radius\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/get-started-radius#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Get Started: RADIUS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Get Started: RADIUS - JumpCloud","description":"Discover how to get started with RADIUS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/get-started-radius","og_locale":"en_US","og_type":"article","og_title":"Get Started: RADIUS","og_description":"Discover how to get started with RADIUS.","og_url":"https:\/\/jumpcloud.com\/support\/get-started-radius","og_site_name":"JumpCloud","article_modified_time":"2024-06-21T16:36:45+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/get-started-radius","url":"https:\/\/jumpcloud.com\/support\/get-started-radius","name":"Get Started: RADIUS - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:32+00:00","dateModified":"2024-06-21T16:36:45+00:00","description":"Discover how to get started with RADIUS.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/get-started-radius#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/get-started-radius"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/get-started-radius#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Get Started: RADIUS"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74971"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74971\/revisions"}],"predecessor-version":[{"id":111742,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74971\/revisions\/111742"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=74971"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=74971"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=74971"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=74971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}