Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
44 guides in Authentication
iOS and macOS 802.1X troubleshooting: a deployment checklist for Intune, Jamf and Entra ID
Use this checklist to diagnose why iPhones, iPads and Macs fail 802.1X on Intune or Jamf Pro. Each failure maps to one of four causes: server trust, identity certificate, macOS mode or Entra ID group scoping. You will confirm the cause from eapolclient and RADIUS logs, apply the fix and stage future certificate rotations.
Intune WiFi profile server trust: certificate server names and root CA checklist for Entra ID
You will be able to configure the server validation half of an Intune WiFi profile so EAP-TLS and PEAP connect on Windows, Apple and Android. You will match certificate server names to the RADIUS certificate, deploy the correct root CA, align Entra ID group assignments, and stage certificate renewals before they silently break connections.
Android 802.1X and EAP-TLS troubleshooting: a deployment checklist for Intune and Entra ID
You will be able to pinpoint why managed Android phones fail EAP-TLS on your staff SSID and fix it in Intune. Match each symptom to the four usual causes - missing CA or domain, client certificate in the wrong profile, a mismatched RADIUS server names value, or an undelivered trusted root. Then apply a rollout checklist that stops repeat outages.
Configuring RADIUS Authentication for Guest and Staff WiFi Networks
This technical reference guide outlines the architecture, configuration, and deployment of RADIUS authentication for enterprise guest and staff WiFi networks. It provides network architects and IT managers with the exact protocols, security standards, and troubleshooting methodologies required to build secure, scalable wireless access control systems.
Passpoint and OpenRoaming: Complete Guide
This technical reference guide provides a comprehensive analysis of Passpoint (Hotspot 2.0) and WBA OpenRoaming frameworks within enterprise WiFi networks. It details the underlying authentication protocols, architectural components, and deployment strategies required to establish secure, frictionless guest connectivity. Network architects and IT leaders will learn how to design, implement, and troubleshoot these standards to eliminate manual login barriers while maintaining enterprise-grade security.
Aruba ClearPass vs. Purple WiFi: Comparing Features and Co-deployment
A comprehensive technical guide detailing the co-deployment architecture of Aruba ClearPass and Purple WiFi. It covers RADIUS proxy configuration, dynamic VLAN assignment, and best practices for delivering secure, analytics-driven guest networks alongside enterprise NAC.
Cisco ISE vs. Purple WiFi: How They Compare and Work Together
This guide explains how Cisco ISE and Purple WiFi serve distinct but complementary roles in enterprise networks. It details how to use Cisco ISE for secure 802.1X corporate access while leveraging Purple for GDPR-compliant guest WiFi, marketing analytics, and CRM integration.
EAP-TLS vs EAP-TTLS: Which Certificate-Based WiFi Protocol Should You Choose?
This guide provides a definitive head-to-head comparison of EAP-TLS and EAP-TTLS for enterprise WiFi authentication under IEEE 802.1X. It explains the architectural difference between mutual certificate authentication and server-only certificate tunnelling, and gives IT managers, network architects, and CISOs a clear decision framework based on device management capabilities and compliance requirements. Purple supports both EAP-TLS and EAP-TTLS authentication paths for Staff WiFi, and this guide helps organisations understand the infrastructure trade-offs before committing to either approach.
What is an 802.1X Supplicant? Client Types and Device Configuration
This guide explains the role of the 802.1X supplicant in enterprise WiFi authentication. It covers the technical architecture, compares native OS supplicants with third-party clients, and provides practical configuration guidance for IT teams deploying EAP-TLS and PEAP.
Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how WPA3-SAE impacts per-device key strategies and when to deploy transition modes versus moving to 802.1X.
Captive Portal Authentication Methods Compared
This authoritative technical reference guide evaluates the architectural, operational, and compliance trade-offs of five core captive portal authentication methods. It provides network architects, IT directors, and marketing managers with the quantitative data and decision frameworks required to balance guest onboarding friction with data-collection requirements across enterprise venues.
What Is MAC Address Authentication? When to Use It and When to Avoid It
This authoritative technical reference guide covers MAC address authentication in enterprise WiFi environments - how RADIUS-based MAC authentication works at Layer 2, its inherent security vulnerabilities (including MAC spoofing and the impact of OS-level MAC randomisation), and the precise operational contexts where it remains a valid tool for managing IoT and headless devices. It provides actionable deployment guidance for IT managers and network architects across hospitality, retail, healthcare, and public-sector venues, with real-world worked examples, decision frameworks, and integration context for Purple's guest WiFi and analytics platform.
How to Set Up Enterprise WiFi on iOS and macOS with 802.1X
This authoritative guide provides senior IT leaders with actionable steps for deploying 802.1X enterprise WiFi on iOS and macOS devices. It covers certificate-based authentication (EAP-TLS), MDM configuration profiles, and architecture integration to secure corporate networks while supporting BYOD initiatives.
How to Set Up Enterprise WiFi on Android Devices with EAP-TLS
This technical reference guide provides senior IT leaders with a comprehensive blueprint for deploying 802.1X EAP-TLS authentication on Android devices. It covers the architectural mechanics, manual and MDM-driven implementation strategies, and troubleshooting methodologies necessary to secure enterprise wireless networks.
How to Use Microsoft Intune to Push WiFi Certificates to Devices
A comprehensive technical reference for IT leaders on deploying 802.1X WiFi certificates via Microsoft Intune. Covers SCEP vs PKCS architecture, implementation steps, compliance mapping, and real-world deployment scenarios for enterprise environments.
How to Set Up Azure Entra ID (Azure AD) for WiFi Authentication
This authoritative guide details the architecture, implementation steps, and business impact of integrating Azure Entra ID with 802.1X for enterprise WiFi authentication. It provides network architects and IT managers with practical deployment strategies, replacing legacy PSKs with zero-trust, certificate-based network access.
How to Configure WPA2-Enterprise on Common Access Point Platforms (Cisco, Aruba, Ubiquiti)
This technical reference guide provides senior IT professionals and network architects with a definitive, vendor-specific walkthrough for deploying WPA2-Enterprise on Cisco, Aruba, and Ubiquiti platforms. It details architecture, RADIUS integration, compliance requirements, and real-world deployment scenarios across enterprise and venue environments.
How to set up a RADIUS server for WiFi authentication: Step-by-step 802.1X guide
Configure FreeRADIUS, Windows Server NPS, and Cloud RADIUS for enterprise 802.1X WiFi authentication. Step-by-step guide covering shared secrets, EAP-TLS certificates, dynamic VLAN assignment, and Microsoft Entra ID integration.
How to Configure 802.1X WiFi Authentication: A Step-by-Step Guide
This technical guide provides a step-by-step walkthrough for configuring 802.1X enterprise WiFi authentication. It covers RADIUS server setup, certificate deployment, and practical deployment strategies for IT leaders across high-footfall venues.
Eduroam and 802.1X: secure WiFi authentication for higher education | Purple
Architect and secure eduroam 802.1X WiFi in higher education. Compare EAP-TLS vs PEAP, configure RADIUS federation and RadSec, and isolate guest networks.
What Is PKI? How Public Key Infrastructure Powers WiFi Security
This authoritative technical reference guide explains Public Key Infrastructure (PKI) and its critical role in securing enterprise WiFi networks across hospitality, retail, and public-sector venues. Designed for IT managers, network architects, and CTOs, it provides actionable guidance on certificate-based authentication, IEEE 802.1X deployment with EAP-TLS, and how Purple's platform leverages these standards for scalable, compliant connectivity. Readers will leave with a concrete deployment roadmap, real-world case studies, and a clear understanding of how PKI eliminates the vulnerabilities of shared-secret WiFi.
Streamlining User Onboarding for Secure Network Access
This guide provides a comprehensive technical reference for IT managers, network architects, and venue operations directors on how to streamline user onboarding for secure network access. It covers the full authentication stack - from self-service captive portals and identity federation to IEEE 802.1X, WPA3, RADIUS, and OpenRoaming - with practical deployment guidance for hospitality, retail, events, and public-sector environments. The guide addresses GDPR and PCI DSS compliance requirements, role-based access control, and MAC caching strategies, equipping teams to reduce onboarding friction and administrative overhead without compromising security posture.
Implementing 802.1X Authentication on Mobile Devices
This comprehensive guide provides IT leaders with a technical blueprint for implementing 802.1X authentication on iOS and Android devices. It covers architecture, EAP method selection, MDM provisioning, and troubleshooting to ensure secure, scalable mobile network access.
WiFi Certificate Authentication: How Digital Certificates Secure Wireless Networks
This authoritative guide details how X.509 digital certificates and EAP-TLS replace vulnerable passwords in enterprise WiFi. It provides network architects and IT managers with practical implementation steps, PKI architecture design, and business ROI analysis.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
