{"id":75679,"date":"2023-06-05T13:12:01","date_gmt":"2023-06-05T17:12:01","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75679"},"modified":"2025-02-06T10:42:56","modified_gmt":"2025-02-06T15:42:56","slug":"radius-protocol-support","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/radius-protocol-support","title":{"rendered":"RADIUS Technical Considerations and Protocol Support"},"content":{"rendered":"\n<p>JumpCloud&#8217;s cloud-based RADIUS service extends your organization&#8217;s user JumpCloud credentials to your WiFi and other resources that support the RADIUS protocol. This document will give details on the different options and combinations available for various RADIUS protocols, along with the technical considerations admins need to keep in mind.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">RADIUS Client Public IP Considerations&nbsp;<\/h2>\n\n\n\n<ul>\n<li>Your public IP can only be used one time in JumpCloud.<br>Only public IPv4 is supported. IPv6 is not supported.<br>If your public IP Address is dynamic and not statically assigned by your ISP, you will need to update the RADIUS configuration within JumpCloud to reflect the newly assigned IP Address. You may change this either within the Admin Portal or via the API .<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Authentication Protocols Supported by JumpCloud&nbsp;<\/strong><\/h2>\n\n\n\n<ul>\n<li>Mutual TLS (mTLS)\n<ul>\n<li>EAP-TLS<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>TLSv1.2 (or later)\n<ul>\n<li>PEAPv0 (MSCHAPv2-based)<\/li>\n\n\n\n<li>EAP-TTLS\/PAP<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Shared key encryption:\n<ul>\n<li>EAP-MSCHAPv2<\/li>\n\n\n\n<li>MSCHAPv2<\/li>\n\n\n\n<li>PAP*<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<ul>\n<li>PAP encryption is weak; JumpCloud strongly recommends using protocols other than PAP.<\/li>\n\n\n\n<li>Mac and iOS devices require additional configuration to use EAP-TTLS\/PAP authentication for wireless clients.\n<ul>\n<li>See:&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/configure-eap-ttls-pap-on-mac--ios-for-radius\" target=\"_blank\" rel=\"noreferrer noopener\">EAP-TTLS\/PAP Initial Configuration on Mac &amp; iOS Devices for JumpCloud RADIUS client<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>All protocols are always available. The user or admin will configure the device to select a single protocol during the authentication attempts being made to the network. That decision should be based on the desired Multi-Factor Authentication (MFA) or primary Identity Provider (IdP) to be used.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Protocol Support for JumpCloud MFA:<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Protocol<\/th><th>Method<\/th><\/tr><\/thead><tbody><tr><td>PEAPv0<\/td><td>Push<\/td><\/tr><tr><td>EAP with TTLS\/PAP<\/td><td>TOTP\/Push<\/td><\/tr><tr><td>EAP-MSCHAPv2<\/td><td>Push<\/td><\/tr><tr><td>MSCHAPv2<\/td><td>Push<\/td><\/tr><tr><td>PAP<\/td><td>TOTP\/Push<\/td><\/tr><tr><td>EAP-TLS<\/td><td>None<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>MFA methods:<\/strong><\/h2>\n\n\n\n<ul>\n<li>TOTP: uses an authenticator App (like JumpCloud Protect, Microsoft Authenticator, or Google Authenticator) to generate 6-digit codes<\/li>\n\n\n\n<li>Push: uses JumpCloud Protect in-App push notifications<\/li>\n\n\n\n<li>We recommend turning on MFA for Radius for VPN. We don\u2019t currently recommend that you enable RADIUS TOTP MFA on your wireless network servers, however JumpCloud Protect Mobile Push can be used on RADIUS VPN servers and wireless network RADIUS servers.<\/li>\n<\/ul>\n\n\n\n<p>See:&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/mfa-for-admins\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud MFA Guide<\/a>.&nbsp;&nbsp;<\/p>\n\n\n\n<p><strong>Entra ID Delegated Authentication<\/strong><\/p>\n\n\n\n<ul>\n<li>For organizations planning to use Entra ID as their IdP,&nbsp;they need to&nbsp;import those users into JumpCloud and assign them to a User Group that has access to the RADIUS server.\n<ul>\n<li>See: <a href=\"https:\/\/jumpcloud.com\/support\/authenticate-to-radius-with-azure-ad\">Authenticate to RADIUS with Entra ID<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>When authenticating with Entra ID, the UPN in Entra ID should match the company email address in JumpCloud and the user should be using this attribute for their Radius login.\n<ul>\n<li>See: <a href=\"https:\/\/jumpcloud.com\/support\/configure-real-time-user-provisioning-from-azure-ad\">Configure Real-time User Provisioning from Entra ID<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p><strong>Protocol Support for Entra ID Delegated Authentication:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Protocol<\/th><th>MFA<\/th><\/tr><\/thead><tbody><tr><td>EAP with TTLS\/PAP<\/td><td>None&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;<\/td><\/tr><tr><td>PAP<\/td><td>None<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>MFA is not supported when authenticating through an IdP other than JumpCloud, such as Entra ID.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>JumpCloud&#8217;s cloud-based RADIUS service extends your organization&#8217;s user JumpCloud credentials to your WiFi and other resources that support the RADIUS [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2845,2897],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>RADIUS Technical Considerations and Protocol Support - JumpCloud<\/title>\n<meta name=\"description\" content=\"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RADIUS Technical Considerations and Protocol Support\" \/>\n<meta property=\"og:description\" content=\"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-06T15:42:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\",\"url\":\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\",\"name\":\"RADIUS Technical Considerations and Protocol Support - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:12:01+00:00\",\"dateModified\":\"2025-02-06T15:42:56+00:00\",\"description\":\"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/radius-protocol-support#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/radius-protocol-support\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/radius-protocol-support#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"RADIUS Technical Considerations and Protocol Support\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"RADIUS Technical Considerations and Protocol Support - JumpCloud","description":"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/radius-protocol-support","og_locale":"en_US","og_type":"article","og_title":"RADIUS Technical Considerations and Protocol Support","og_description":"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.","og_url":"https:\/\/jumpcloud.com\/support\/radius-protocol-support","og_site_name":"JumpCloud","article_modified_time":"2025-02-06T15:42:56+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/radius-protocol-support","url":"https:\/\/jumpcloud.com\/support\/radius-protocol-support","name":"RADIUS Technical Considerations and Protocol Support - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:12:01+00:00","dateModified":"2025-02-06T15:42:56+00:00","description":"Explore the technical considerations and protocol support for using cloud RADIUS in JumpCloud.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/radius-protocol-support#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/radius-protocol-support"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/radius-protocol-support#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"RADIUS Technical Considerations and Protocol Support"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75679"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75679\/revisions"}],"predecessor-version":[{"id":120686,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75679\/revisions\/120686"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75679"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75679"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75679"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}