RADIUSaaS

Home

Authentication Service for Your Network

Home

RADIUSaaS is a cloud-based RADIUS service that offers easy and secure authentication for network resources. It delivers the comfort, reliability, and scalability of a native cloud SaaS without the hassle of installing, maintaining, or updating your own RADIUS server. RADIUSaaS supports both RADIUS and RadSec protocols, ensuring compatibility with many network equipment vendors and providing enhanced security and encryption.

With RADIUSaaS, you can authenticate your users based on x.509 certificates or credentials, depending on your needs and use cases. RADIUSaaS is compatible with many PKIs / CAs like SCEPman or Microsoft Cloud PKI, giving you the freedom to choose the one that suits you best.

Who are we authenticating today?

Certificate-Based Authentication for Wi-Fi, LAN, VPN - RADIUSaaS Managed Users

Seamless Network Access with Certificate-Based Authentication

RADIUSaaS features Certificate-Based Authentication (CBA) for various networks, such as Wi-Fi, LAN and VPN. It enables seamless network access as devices get auto-authenticated through digital certificates, enhancing convenience and security. RADIUSaaS helps to easily deploy CBA to clients that are managed by modern Mobile Device Management (MDM) solutions, such as Microsoft Intune, JAMF and others.
Credential Authentication for Printers and Non-MDM Devices - RADIUSaaS

Flexible Authentication for All Devices with RADIUSaaS

Certificate-Based Authentication is the preferred method, but RADIUSaaS also supports Credentials Based Authentication (username and password). This option is useful for authenticating devices that cannot handle certificates or are not managed by your MDM, such as printers.
Secure Network Access for Guests and BYOD - RADIUSaaS

Streamline Guest and BYOD Network Access with RADIUSaaS

RADIUSaaS allows you to provide secure and convenient access to your network for your guests and BYOD. Empower your users to create and manage guest accounts in a self service portal, without requiring any administrative intervention. With RADIUSaaS, you can also customize the validity, password policy, and quota for guest accounts. Automatic deletion of expired guest accounts, owner-assignment to guest accounts and bulk import make your life easier.
Integrate with Azure Sentinel and other SIEMs

Integrate with Azure Sentinel and other SIEMs

RADIUSaaS integrates with Azure Sentinel and other SIEMs via Azure Log Analytics Exporter, centralizing authentication logs for real-time monitoring and threat detection. Azure Sentinel delivers actionable insights, compliance analytics, and proactive threat response.
Combine RADIUSaaS With SCEPman or Microsoft PKI

Combine RADIUSaaS With SCEPman or Microsoft PKI

SCEPman or Microsoft Cloud PKI are ideal companions to RADIUSaaS. Built by the same team as RADIUSaaS, SCEPman simplifies certificate management by automating certificate issuance and revocation. It eliminates the complexities of traditional PKI setups, allowing organizations to deploy secure network access faster, without the need for additional infrastructure or tenant permissions.

Let Our Customers Do the Talking

BlibliCBS International Business SchoolD-OrbitDMG MORIDouglaseswEUFHFreudenbergLUOVIroadsurfer GmbHVeidekke ASAWorldwide Express

Specifications

Network entities

Network entities

  • Wi-Fi (802.1x, EAP)
  • LAN (802.1x, EAP)
  • VPN
Authentication Factors

Authentication Factors

  • User or device certificates (primary use-case)
  • Username & Password (for special purposes / devices)
Managed Services

Scalability

  • 50 to > 100.000 users
Managed Services

High Availability

  • High-availability service powered by Microsoft Azure and Kubernetes
  • Geo-redundancy available
  • Hyperscaler-redundancy available
Customer Isolation

Security

  • Dedicated RADIUSaaS instances per customer
  • Our development and operations teams are certified according to ISO 27001
Full Service

Full Service

  • Incident support and all updates included
All relevant protocols are supported: authentication protocols such as EAP-TLS (RFC 5216), PEAP-MSCHAPv2 (RFC 2759 & 8940), EAP-TTLS-PAP (RFC 5281 & 1334), EAP-TTLS-MSCHAPv2 (RFC 5281 & 2759) and transport protocols including RadSec (RFC 6614), RADIUS (RFC 2865).

RADIUSaaS is compatible with many network vendors like Aruba, Cisco, Extreme, FortiNet, Juniper, Meraki, MikroTik, Sophos, UniFi.

Features of the Admin Portal

Wi-Fi and LAN policy creation
Easy download of XML files to generate Wi-Fi and LAN policies
Home
Find out what’s going on with comprehensive logs
Logging
Secure and easy admin login with your Microsoft Entra ID (Azure AD) account
Admin permissions
Control admin permission for RADIUSaaS through Azure AD UPNs
User accounts
Mange user accounts for legacy devices that cannot authenticate via certificates
Trusted roots
Import trusted root certificate(s) from your CAs

Architecture

RADIUSaaS is provided as a service hosted on Microsoft Azure.

RADIUS Architecture