Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
49 guides in Authentication
A Network Administrator’s Guide to Configuring RADIUS Authentication for Guest WiFi
A comprehensive technical reference for network administrators on deploying RADIUS authentication for guest WiFi. Covers architecture, vendor-neutral configuration steps, security best practices, and troubleshooting common deployment failures.
Implementing SCEP for Secure BYOD and 802.1X WiFi in Higher Education
This technical guide details how higher education IT teams can automate 802.1X certificate enrollment for thousands of BYOD devices using SCEP. It covers the architecture, security benefits, and practical deployment steps to replace manual onboarding with a secure, zero-touch network access model.
Configuring RADIUS Authentication for Guest and Staff WiFi Networks
This technical reference guide outlines the architecture, configuration, and deployment of RADIUS authentication for enterprise guest and staff WiFi networks. It provides network architects and IT managers with the exact protocols, security standards, and troubleshooting methodologies required to build secure, scalable wireless access control systems.
Passpoint and OpenRoaming: Complete Guide
This technical reference guide provides a comprehensive analysis of Passpoint (Hotspot 2.0) and WBA OpenRoaming frameworks within enterprise WiFi networks. It details the underlying authentication protocols, architectural components, and deployment strategies required to establish secure, frictionless guest connectivity. Network architects and IT leaders will learn how to design, implement, and troubleshoot these standards to eliminate manual login barriers while maintaining enterprise-grade security.
How to Implement SCEP for Secure BYOD and Network Enrolment in Higher Education
This technical guide provides network architects and IT managers with a vendor-neutral blueprint for deploying SCEP-based certificate enrolment to secure higher education campus networks. It details how to migrate from password-based PEAP to 802.1X EAP-TLS, automate BYOD onboarding, and enforce robust VLAN segmentation.
Server RADIUS: a comprehensive guide for businesses
This guide provides IT managers, network architects, and CTOs with a definitive technical reference on server RADIUS authentication for enterprise WiFi. It covers the AAA framework, 802.1X architecture, EAP method selection, cloud versus on-premises deployment trade-offs, and dynamic VLAN assignment. Venue operators across hospitality, retail, events, and the public sector will find actionable implementation guidance, real-world case studies, and the decision frameworks needed to migrate from insecure pre-shared keys to a secure, identity-driven network access control architecture.
Aruba ClearPass vs. Purple WiFi: Comparing Features and Co-deployment
A comprehensive technical guide detailing the co-deployment architecture of Aruba ClearPass and Purple WiFi. It covers RADIUS proxy configuration, dynamic VLAN assignment, and best practices for delivering secure, analytics-driven guest networks alongside enterprise NAC.
Cisco ISE vs. Purple WiFi: How They Compare and Work Together
This guide explains how Cisco ISE and Purple WiFi serve distinct but complementary roles in enterprise networks. It details how to use Cisco ISE for secure 802.1X corporate access while leveraging Purple for GDPR-compliant guest WiFi, marketing analytics, and CRM integration.
EAP-TLS vs EAP-TTLS: Which Certificate-Based WiFi Protocol Should You Choose?
This guide provides a definitive head-to-head comparison of EAP-TLS and EAP-TTLS for enterprise WiFi authentication under IEEE 802.1X. It explains the architectural difference between mutual certificate authentication and server-only certificate tunnelling, and gives IT managers, network architects, and CISOs a clear decision framework based on device management capabilities and compliance requirements. Purple supports both EAP-TLS and EAP-TTLS authentication paths for Staff WiFi, and this guide helps organisations understand the infrastructure trade-offs before committing to either approach.
What is an 802.1X Supplicant? Client Types and Device Configuration
This guide explains the role of the 802.1X supplicant in enterprise WiFi authentication. It covers the technical architecture, compares native OS supplicants with third-party clients, and provides practical configuration guidance for IT teams deploying EAP-TLS and PEAP.
Managing Digital Certificates for EAP-TLS WiFi Authentication
This technical reference guide details the lifecycle management of digital certificates for EAP-TLS WiFi authentication. It provides actionable strategies for deploying, renewing, and revoking certificates at scale across enterprise networks using SCEP and MDM integrations.
Deploying SCEP for Secure Higher Education BYOD and WiFi Authentication
This technical guide provides network architects and IT managers with a vendor-neutral blueprint for deploying SCEP-based certificate enrolment to secure higher education WiFi. It details the transition from vulnerable password-based authentication to EAP-TLS, focusing on scalable BYOD onboarding and MDM integration.
Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how WPA3-SAE impacts per-device key strategies and when to deploy transition modes versus moving to 802.1X.
Captive Portal Authentication Methods Compared
This authoritative technical reference guide evaluates the architectural, operational, and compliance trade-offs of five core captive portal authentication methods. It provides network architects, IT directors, and marketing managers with the quantitative data and decision frameworks required to balance guest onboarding friction with data-collection requirements across enterprise venues.
What Is MAC Address Authentication? When to Use It and When to Avoid It
This authoritative technical reference guide covers MAC address authentication in enterprise WiFi environments - how RADIUS-based MAC authentication works at Layer 2, its inherent security vulnerabilities (including MAC spoofing and the impact of OS-level MAC randomisation), and the precise operational contexts where it remains a valid tool for managing IoT and headless devices. It provides actionable deployment guidance for IT managers and network architects across hospitality, retail, healthcare, and public-sector venues, with real-world worked examples, decision frameworks, and integration context for Purple's guest WiFi and analytics platform.
How to Set Up Enterprise WiFi on iOS and macOS with 802.1X
This authoritative guide provides senior IT leaders with actionable steps for deploying 802.1X enterprise WiFi on iOS and macOS devices. It covers certificate-based authentication (EAP-TLS), MDM configuration profiles, and architecture integration to secure corporate networks while supporting BYOD initiatives.
How to Set Up Enterprise WiFi on Android Devices with EAP-TLS
This technical reference guide provides senior IT leaders with a comprehensive blueprint for deploying 802.1X EAP-TLS authentication on Android devices. It covers the architectural mechanics, manual and MDM-driven implementation strategies, and troubleshooting methodologies necessary to secure enterprise wireless networks.
How to Use Microsoft Intune to Push WiFi Certificates to Devices
A comprehensive technical reference for IT leaders on deploying 802.1X WiFi certificates via Microsoft Intune. Covers SCEP vs PKCS architecture, implementation steps, compliance mapping, and real-world deployment scenarios for enterprise environments.
How to Set Up Azure Entra ID (Azure AD) for WiFi Authentication
This authoritative guide details the architecture, implementation steps, and business impact of integrating Azure Entra ID with 802.1X for enterprise WiFi authentication. It provides network architects and IT managers with practical deployment strategies, replacing legacy PSKs with zero-trust, certificate-based network access.
How to Configure WPA2-Enterprise on Common Access Point Platforms (Cisco, Aruba, Ubiquiti)
This technical reference guide provides senior IT professionals and network architects with a definitive, vendor-specific walkthrough for deploying WPA2-Enterprise on Cisco, Aruba, and Ubiquiti platforms. It details architecture, RADIUS integration, compliance requirements, and real-world deployment scenarios across enterprise and venue environments.
How to set up a RADIUS server for WiFi authentication: Step-by-step 802.1X guide
Configure FreeRADIUS, Windows Server NPS, and Cloud RADIUS for enterprise 802.1X WiFi authentication. Step-by-step guide covering shared secrets, EAP-TLS certificates, dynamic VLAN assignment, and Microsoft Entra ID integration.
How to Configure 802.1X WiFi Authentication: A Step-by-Step Guide
This technical guide provides a step-by-step walkthrough for configuring 802.1X enterprise WiFi authentication. It covers RADIUS server setup, certificate deployment, and practical deployment strategies for IT leaders across high-footfall venues.
Eduroam and 802.1X: secure WiFi authentication for higher education | Purple
Architect and secure eduroam 802.1X WiFi in higher education. Compare EAP-TLS vs PEAP, configure RADIUS federation and RadSec, and isolate guest networks.
Passwordless WiFi: What It Is and How to Implement It
This technical reference guide provides network architects and IT managers with a comprehensive blueprint for transitioning from vulnerable shared passwords to secure, certificate-based WiFi authentication. It covers 802.1X architecture, EAP-TLS deployment strategies, PKI management, and the measurable business impact of reducing helpdesk overhead while enhancing enterprise security posture and compliance readiness.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
