Purple on Juniper Mist: guest portal, MPSK and staff WiFi
Juniper Mist WLANs can send guests to an external portal and staff to RADIUS from the Mist cloud dashboard. Purple provides the portal, the RADIUS and MPSK with dynamic VLAN steering, so Mist access points deliver guest data capture and multi-tenant WiFi alongside Mist’s own location services.
What Purple supports on Juniper Mist
Four capabilities are supported on Juniper Mist, the same four we list for it in the hardware integrations directory. Each one uses settings the Mist cloud dashboard already has, so nothing new is installed on site.
Guest captive portal
The Mist cloud dashboard redirects guests on your guest SSID to a Purple splash page, where they sign in by email, social login or SMS. Every sign-in becomes a consented first-party record you can report on and market to.
802.1X staff WiFi
Add Purple as the RADIUS server for your staff SSID and each person signs in with their own credentials rather than a shared password, so a leaver loses access the moment their account is removed.
Multi-tenant WiFi: Mist MPSK
Each resident, tenant or device group gets a personal key on one shared SSID. Purple manages the keys and the Mist cloud dashboard enforces them.
Dynamic VLAN steering
Purple returns a VLAN with each RADIUS decision, so a user or key lands on the right network segment without an SSID per group.
Supported Juniper Mist platforms
Juniper Mist AP43, AP33, AP12, Mist Cloud Platform, Mist AI Engine
RADIUS servers, ports and the walled garden allowlist are maintained by our support team and can differ per deployment. Get the current Juniper Mist configuration from Purple Support.
How to set up Purple on Juniper Mist
A guest WiFi rollout on Juniper Mist follows the same five steps whatever the size of the estate. The step-by-step guides linked here cover the exact Mist cloud dashboard screens.
Check your platform is on the supported list
Purple supports Juniper Mist AP43, AP33, AP12, Mist Cloud Platform, Mist AI Engine. If your controller or firmware is not listed, ask us before you start.
Point the guest SSID at Purple in the Mist cloud dashboard
Set the guest network's captive portal or splash page to Purple's hosted portal and add Purple as its RADIUS server. The Juniper Mist setup guide walks through each screen.
Add the walled garden and RADIUS details from Purple Support
The walled garden entries and RADIUS servers are set per deployment and change over time, so take them from the hardware guide on support.purple.ai, not from a summary page.
Build your splash page and choose sign-in methods
Design the splash page in Purple, pick the login methods and data fields you need, and set consent wording for your region.
Test on real devices, then roll out
Connect with an iPhone, an Android phone and a laptop before you open the network to guests. If the portal does not appear, the troubleshooting guides below cover the usual causes.
Start with these Juniper Mist guides
Every Juniper Mist guide, by task
24 published guides name Juniper Mist in their title or cover it in depth. This list updates as new guides are published.
Captive portal and splash page setup (3)
- Juniper Mist and guest WiFi: captive portal setup with Purple
How Juniper Mist access points work with Purple guest WiFi using an external portal and the Mist API secret, including what differs because Mist does not use RADIUS for…
- FortiGate captive portal setup with an external portal server
You will be able to configure a FortiGate to enforce an external captive portal hosted by Purple, with RADIUS authentication and accounting, a working exempt list and a…
- Integrating WeChat WiFi Login: Capturing Engagement via Social Captive Portals
This guide details how to integrate WeChat WiFi authentication into enterprise captive portals, covering the OAuth 2.0 architecture, RADIUS integration, and step-by-step…
802.1X, RADIUS and network access control (4)
- Configuring 802.1X on Juniper Mist with cloud RADIUS
You will be able to configure a WPA2 or WPA3-Enterprise WLAN on Juniper Mist that authenticates against cloud RADIUS, decide between UDP RADIUS, RadSec and a Mist Edge…
- Intune WiFi profile server trust: certificate server names and root CA checklist for Entra ID
You will be able to configure the server validation half of an Intune WiFi profile so EAP-TLS and PEAP connect on Windows, Apple and Android. You will match certificate…
- Microsoft Cloud PKI for WiFi: EAP-TLS certificate deployment with Intune and Entra ID
You will be able to decide whether Microsoft Cloud PKI, a Cloud PKI root or bring your own CA (BYOCA) fits your estate. You can then deploy EAP-TLS WiFi certificates to…
- Microsoft Intune WiFi Certificate Deployment via SCEP and PKCS
You will be able to choose between SCEP and PKCS for staff WiFi certificates, then deploy the trusted root, client certificate and 802.1X WiFi profiles in Intune in the…
iPSK, PPSK and per-device keys (2)
- How to Reduce the Number of WiFi SSIDs Using Per-Device PSK (iPSK, DPSK, MPSK)
This authoritative technical reference guide explains how IT teams can eliminate WiFi performance degradation caused by SSID beacon overhead by collapsing multiple…
- Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how…
Troubleshooting (1)
- Cisco Meraki 802.11r adaptive vs enabled: fixing roaming on MR access points
You will be able to choose between disabled, enabled and adaptive 802.11r on each Cisco Meraki MR SSID, based on your device mix and security mode. You will also…
Architecture, comparisons and planning (14)
- Cloud-Managed WiFi vs Controller-Based WiFi: Which Should You Choose?
This guide provides a vendor-neutral technical comparison of cloud-managed WiFi and controller-based (on-premise) WiFi architectures, helping IT managers, network…
- Cloud4Wi Alternatives: Captive Portal Platforms Compared
Use this comparison to shortlist a Cloud4Wi alternative by architecture first, marketing depth second and price third. You can match your estate to Purple, IronWiFi…
- Designing WiFi Networks for Multi-Tenant Office Buildings
This guide provides IT managers, network architects, and CTOs with a vendor-neutral blueprint for designing scalable, secure, and isolated WiFi networks across…
- Hotel WiFi RFP checklist: authentication, content filtering and guest marketing
Use this checklist to write one hotel WiFi tender that scores vendors on staff authentication, content filtering and guest data capture together. You will be able to set…
- How Staff WiFi Helps You Meet ISO/IEC 27001: Mapping Annex A Controls to Your Wireless Network
You will be able to decide whether your staff WiFi can evidence 12 ISO/IEC 27001:2022 Annex A controls, including A.5.15, A.8.5 and A.8.22. You will also be able to…
- HPE Aruba Central presence analytics: setup, exports and limits
You will be able to enable Aruba Central presence analytics per site, calibrate the RSSI threshold and dwell boundaries against a ground-truth count, and export…
- Managed WiFi cost per door: a worked model for MDU operators
You will be able to build a defensible managed WiFi cost per door for an MDU property, line by line across cabling, access points, switching, licensing and support. You…
- Network device management guide: SNMP, TFTP, and syslog without a full NMS
You will be able to manage a small switch and router estate with SNMP polling, TFTP config backups and a syslog and trap receiver run from one management host. You can…
- Network topology mapping guide: building a live device map from CDP, LLDP, and MTR
You will be able to build a network map that stays current by merging CDP and LLDP neighbor tables, MTR path hops and a LAN subnet sweep. You can then check the map for…
- Passpoint and guest marketing: keeping first-party data when guests auto-connect
Decide how to keep consented first-party data when guests auto-connect through Passpoint or OpenRoaming. You will be able to move consent from the splash page to…
- Per-resident WiFi billing for MDU and Student Housing: platform options
You will be able to choose between bulk inclusion, landlord retail, third-party ISP retail and base-plus-upgrade WiFi billing for MDU and Student Housing properties. You…
- SOC 2 Type II and Staff WiFi: Passing the Key Controls on Your Wireless Network
You will be able to map each of the key SOC 2 Type II controls to your staff WiFi and close the gaps auditors find. You can then choose between 802.1X, iPSK and a…
- The Ultimate Guide to WiFi Channels: 2.4GHz vs 5GHz Explained
You will be able to pick the right 5GHz and 2.4GHz channels for your venue, choose channel widths by density, and decide which DFS channels to enable from evidence. You…
- Understanding RSSI and Signal Strength for Optimal Channel Planning
You will be able to read RSSI correctly, set -67 dBm and 25 dB SNR design targets, and decide AP placement, power, channel width and data rates from survey evidence. You…
What you can run on Juniper Mist
The integration is the entry point. These are the Purple products that run on top of it, each on the Juniper Mist hardware you already have.
Running more than one vendor?
Purple is one platform across mixed estates. The other hardware hubs cover the same four capabilities:
- Cisco Catalyst and AireOS
- Cisco Meraki
- HPE Aruba
- Ruckus
- Fortinet
- Ubiquiti UniFi
- Extreme Networks
- TP-Link Omada
Comparing Purple with another guest WiFi or RADIUS platform instead? See every Purple comparison or captive portal software compared.
Juniper Mist and Purple: questions
Does Purple work with Juniper Mist?
Yes. On Juniper Mist, Purple provides the guest captive portal, cloud RADIUS for 802.1X staff WiFi, Mist MPSK for multi-tenant WiFi and dynamic VLAN steering. Supported platforms: Juniper Mist AP43, AP33, AP12, Mist Cloud Platform, Mist AI Engine.
Do I need to replace my Juniper Mist access points to use Purple?
No. Purple runs on the access points you already own. You configure the guest SSID in the Mist cloud dashboard to redirect to Purple's hosted splash page and add Purple as a RADIUS server; the hardware stays as it is.
Where do I find the RADIUS servers and walled garden entries for Juniper Mist?
In the hardware guides on support.purple.ai. Those values are set per deployment and change over time, so we do not publish them on marketing pages or in guides. Always take them from Purple Support.
How does multi-tenant WiFi work on Juniper Mist?
With Mist MPSK. Each resident, tenant or device group gets its own key on a shared SSID, and Purple returns the matching VLAN over RADIUS, so each unit gets a private network without an SSID per unit.
Which Juniper Mist guide should I read first?
Start with "Juniper Mist cloud wireless and guest WiFi integration". It covers the Mist cloud dashboard settings for the guest portal. The rest of the Juniper Mist guides on this page are grouped by task: portal setup, 802.1X and RADIUS, per-user keys and troubleshooting.
Can I run Purple across Juniper Mist and other hardware?
Yes. Purple is one platform across mixed estates, so sites on different vendors share the same splash pages, sign-in data, reporting and RADIUS policies. The hardware integrations directory lists every supported vendor.
See Purple on your Juniper Mist network
Tell us what you run today and we will show you the guest, staff and multi-tenant setup on your own hardware.