Purple on Ubiquiti UniFi: guest portal, PPSK and staff WiFi
The UniFi Network Application supports an external guest portal with allowed authorisation subnets (the walled garden), RADIUS profiles for staff and Private PSK (PPSK) VLANs. Purple fills each role, so a UniFi estate gets branded guest sign-in and per-user access without changing hardware.
What Purple supports on Ubiquiti UniFi
Four capabilities are supported on Ubiquiti UniFi, the same four we list for it in the hardware integrations directory. Each one uses settings the UniFi Network Application already has, so nothing new is installed on site.
Guest captive portal
The UniFi Network Application redirects guests on your guest SSID to a Purple splash page, where they sign in by email, social login or SMS. Every sign-in becomes a consented first-party record you can report on and market to.
802.1X staff WiFi
Add Purple as the RADIUS server for your staff SSID and each person signs in with their own credentials rather than a shared password, so a leaver loses access the moment their account is removed.
Multi-tenant WiFi: UniFi PPSK (Private PSK)
Each resident, tenant or device group gets a personal key on one shared SSID. Purple manages the keys and the UniFi Network Application enforces them.
Dynamic VLAN steering
Purple returns a VLAN with each RADIUS decision, so a user or key lands on the right network segment without an SSID per group.
Supported Ubiquiti UniFi platforms
UniFi APs (U6-Pro, U7-Pro, U6-Enterprise), UniFi Cloud Key, Dream Machine (UDM-Pro), UniFi Network Controller
RADIUS servers, ports and the walled garden allowlist are maintained by our support team and can differ per deployment. Get the current Ubiquiti UniFi configuration from Purple Support.
How to set up Purple on Ubiquiti UniFi
A guest WiFi rollout on Ubiquiti UniFi follows the same five steps whatever the size of the estate. The step-by-step guides linked here cover the exact UniFi Network Application screens.
Check your platform is on the supported list
Purple supports UniFi APs (U6-Pro, U7-Pro, U6-Enterprise), UniFi Cloud Key, Dream Machine (UDM-Pro), UniFi Network Controller. If your controller or firmware is not listed, ask us before you start.
Point the guest SSID at Purple in the UniFi Network Application
Set the guest network's captive portal or splash page to Purple's hosted portal and add Purple as its RADIUS server. The Ubiquiti UniFi setup guide walks through each screen.
Add the walled garden and RADIUS details from Purple Support
The walled garden entries and RADIUS servers are set per deployment and change over time, so take them from the hardware guide on support.purple.ai, not from a summary page.
Build your splash page and choose sign-in methods
Design the splash page in Purple, pick the login methods and data fields you need, and set consent wording for your region.
Test on real devices, then roll out
Connect with an iPhone, an Android phone and a laptop before you open the network to guests. If the portal does not appear, the troubleshooting guides below cover the usual causes.
Start with these Ubiquiti UniFi guides
Every Ubiquiti UniFi guide, by task
30 published guides name Ubiquiti UniFi in their title or cover it in depth. This list updates as new guides are published.
Captive portal and splash page setup (7)
- Captive portal login on Android: a deployment checklist for Cisco Meraki, HPE Aruba and Ubiquiti UniFi
Use this checklist to get the Android sign-in notification appearing reliably on Cisco Meraki, HPE Aruba and Ubiquiti UniFi. You will scope a tight walled garden, block…
- Ubiquiti UniFi and guest WiFi: captive portal setup with Purple
How Ubiquiti UniFi Network works with Purple guest WiFi: an external portal server, controller authorisation and a walled garden, with a link to Purple's step-by-step…
- UniFi captive portal setup guide
How to add a Purple captive portal to Ubiquiti UniFi: an external portal server, controller authorisation and a walled garden, with a link to Purple's step-by-step setup…
- Configuring Captive Portal Redirection on Enterprise Network Controllers
This authoritative guide details the technical architecture and vendor-specific configuration steps required to implement captive portal redirection on enterprise…
- FortiGate captive portal setup with an external portal server
You will be able to configure a FortiGate to enforce an external captive portal hosted by Purple, with RADIUS authentication and accounting, a working exempt list and a…
- Multi-site guest WiFi for franchises: central control with local branding
You will be able to choose an operating model for guest WiFi across your franchise estate and decide who controls guest data under GDPR. You can then lock brand and…
- TP-Link Omada and Purple WiFi for SMB Deployments
This authoritative guide provides IT managers and network architects with a definitive blueprint for integrating TP-Link Omada access points with Purple's cloud RADIUS…
802.1X, RADIUS and network access control (4)
- How to Configure WPA2-Enterprise on Common Access Point Platforms (Cisco, Aruba, Ubiquiti)
This technical reference guide provides senior IT professionals and network architects with a definitive, vendor-specific walkthrough for deploying WPA2-Enterprise on…
- Intune WiFi profile server trust: certificate server names and root CA checklist for Entra ID
You will be able to configure the server validation half of an Intune WiFi profile so EAP-TLS and PEAP connect on Windows, Apple and Android. You will match certificate…
- Microsoft Cloud PKI for WiFi: EAP-TLS certificate deployment with Intune and Entra ID
You will be able to decide whether Microsoft Cloud PKI, a Cloud PKI root or bring your own CA (BYOCA) fits your estate. You can then deploy EAP-TLS WiFi certificates to…
- Microsoft Intune WiFi Certificate Deployment via SCEP and PKCS
You will be able to choose between SCEP and PKCS for staff WiFi certificates, then deploy the trusted root, client certificate and 802.1X WiFi profiles in Intune in the…
iPSK, PPSK and per-device keys (3)
- How to deploy iPSK on Cisco Meraki, HPE Aruba and Ruckus
This hands-on reference guide shows how to deploy iPSK on Cisco Meraki, MPSK on HPE Aruba Central and DPSK on Ruckus SmartZone, with a short UniFi PPSK appendix. It…
- How to Reduce the Number of WiFi SSIDs Using Per-Device PSK (iPSK, DPSK, MPSK)
This authoritative technical reference guide explains how IT teams can eliminate WiFi performance degradation caused by SSID beacon overhead by collapsing multiple…
- Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how…
Troubleshooting (3)
- Ubiquiti UniFi captive portal troubleshooting: external portal, hotspot and walled garden checklist
Use this checklist to find out why your Ubiquiti UniFi captive portal is not working and fix it. You will match the symptom to one of six causes, run two quick tests…
- Ubiquiti UniFi guest portal not redirecting: causes and fixes
This guide isolates a UniFi guest portal redirect failure by following the guest state, redirect, pre-authorisation route and controller authorisation in sequence. It…
- Android 802.1X and EAP-TLS troubleshooting: a deployment checklist for Intune and Entra ID
You will be able to pinpoint why managed Android phones fail EAP-TLS on your staff SSID and fix it in Intune. Match each symptom to the four usual causes - missing CA or…
Architecture, comparisons and planning (13)
- 802.11k and 802.11r on Ubiquiti UniFi: fast roaming settings and deployment checklist
You will be able to decide which UniFi roaming settings to enable on each SSID, in what order, and how to prove they work. The guide maps Fast Roaming, BSS Transition…
- 802.11r and 802.11k on Android: fast roaming deployment on Cisco Meraki, HPE Aruba and Ubiquiti UniFi
You will be able to decide whether to enable 802.11r, 802.11k and 802.11v for your Android fleet on Cisco Meraki, HPE Aruba or Ubiquiti UniFi, and which 802.11r strategy…
- Choosing Enterprise Access Points: Cisco, Aruba, Ruckus, UniFi Compared
Compare Cisco Meraki, Aruba, Ruckus, and UniFi enterprise access points. Evaluate WiFi 6E/7, TCO licensing, RF performance, and controller architectures.
- Cloud4Wi Alternatives: Captive Portal Platforms Compared
Use this comparison to shortlist a Cloud4Wi alternative by architecture first, marketing depth second and price third. You can match your estate to Purple, IronWiFi…
- Cyber Essentials and Staff WiFi: Passing the Five Controls on Your Wireless Network
You will be able to map each of the five Cyber Essentials controls to your staff WiFi and close the gaps assessors find. You can then choose between 802.1X, iPSK and a…
- HIPAA Technical Safeguards for Hospital Staff WiFi: What the Security Rule Actually Requires
You will be able to map each of the five HIPAA technical safeguard standards at 45 CFR 164.312 to a specific staff WiFi control. You can then decide which SSID…
- Hotel WiFi RFP checklist: authentication, content filtering and guest marketing
Use this checklist to write one hotel WiFi tender that scores vendors on staff authentication, content filtering and guest data capture together. You will be able to set…
- KCSIE and school WiFi: combining secure access with content filtering
You will be able to decide how to meet the DfE filtering and monitoring standards on staff, pupil and guest WiFi. You will see how per-person authentication and DNS…
- Managed WiFi cost per door: a worked model for MDU operators
You will be able to build a defensible managed WiFi cost per door for an MDU scheme, line by line across cabling, access points, switching, licensing and support. You…
- Network device management guide: SNMP, TFTP, and syslog without a full NMS
You will be able to manage a small switch and router estate with SNMP polling, TFTP config backups and a syslog and trap receiver run from one management host. You can…
- Network topology mapping guide: building a live device map from CDP, LLDP, and MTR
You will be able to build a network map that stays current by merging CDP and LLDP neighbour tables, MTR path hops and a LAN subnet sweep. You can then check the map for…
- People counting: WiFi vs camera vs door sensor
Decide which people counting technology fits each question you need answered: door sensors for precise entrance totals, overhead cameras for live counts in one zone, and…
- Retrofit vs new build: planning MDU WiFi cabling and access point placement
Decide whether an apartment building needs corridor or in-unit access points, and plan the cabling, risers, fire-stopping and PoE budget each path demands. You will be…
What you can run on Ubiquiti UniFi
The integration is the entry point. These are the Purple products that run on top of it, each on the Ubiquiti UniFi hardware you already have.
Running more than one vendor?
Purple is one platform across mixed estates. The other hardware hubs cover the same four capabilities:
- Cisco Catalyst and AireOS
- Cisco Meraki
- HPE Aruba
- Ruckus
- Fortinet
- Juniper Mist
- Extreme Networks
- TP-Link Omada
Comparing Purple with another guest WiFi or RADIUS platform instead? See every Purple comparison or captive portal software compared.
Ubiquiti UniFi and Purple: questions
Does Purple work with Ubiquiti UniFi?
Yes. On Ubiquiti UniFi, Purple provides the guest captive portal, cloud RADIUS for 802.1X staff WiFi, UniFi PPSK (Private PSK) for multi-tenant WiFi and dynamic VLAN steering. Supported platforms: UniFi APs (U6-Pro, U7-Pro, U6-Enterprise), UniFi Cloud Key, Dream Machine (UDM-Pro), UniFi Network Controller.
Do I need to replace my Ubiquiti UniFi access points to use Purple?
No. Purple runs on the access points you already own. You configure the guest SSID in the UniFi Network Application to redirect to Purple's hosted splash page and add Purple as a RADIUS server; the hardware stays as it is.
Where do I find the RADIUS servers and walled garden entries for Ubiquiti UniFi?
In the hardware guides on support.purple.ai. Those values are set per deployment and change over time, so we do not publish them on marketing pages or in guides. Always take them from Purple Support.
How does multi-tenant WiFi work on Ubiquiti UniFi?
With UniFi PPSK (Private PSK). Each resident, tenant or device group gets its own key on a shared SSID, and Purple returns the matching VLAN over RADIUS, so each unit gets a private network without an SSID per unit.
Which Ubiquiti UniFi guide should I read first?
Start with "Ubiquiti UniFi and Purple WiFi integration guide". It covers the UniFi Network Application settings for the guest portal. The rest of the Ubiquiti UniFi guides on this page are grouped by task: portal setup, 802.1X and RADIUS, per-user keys and troubleshooting.
Can I run Purple across Ubiquiti UniFi and other hardware?
Yes. Purple is one platform across mixed estates, so sites on different vendors share the same splash pages, sign-in data, reporting and RADIUS policies. The hardware integrations directory lists every supported vendor.
See Purple on your Ubiquiti UniFi network
Tell us what you run today and we will show you the guest, staff and multi-tenant setup on your own hardware.