What is cloud RADIUS?
Definition
Cloud RADIUS is a hosted RADIUS authentication service that replaces on-premises servers such as FreeRADIUS, Microsoft NPS or Cisco ISE. Access points send 802.1X requests to the cloud service, which checks each user or device against an identity provider such as Microsoft Entra ID, Okta or Google Workspace.
Cloud RADIUS explained
Cloud RADIUS is also called RADIUS as a service. It runs the same protocol, handling authentication, authorisation and accounting, but in a highly available cloud environment instead of on a server in your comms room. The access points or controller still act as the RADIUS client; only the server moves.
The main reason teams move is the identity provider. Directories now live in the cloud, and a hosted RADIUS service bridges Entra ID, Okta or Google directly to the network without an on-premises NPS cluster in the middle. It also removes the hardware, patching and failover work of running your own servers across multiple sites.
The decision is not automatic. On-premises RADIUS keeps authentication working if the WAN link drops, which matters for some sites, and has a different cost profile over time. A cloud service suits distributed estates that want EAP-TLS with automated certificate enrolment (SCEP), per-user policy such as dynamic VLAN assignment, and one place to manage it all.
Guides on Cloud RADIUS
- Technical guideWhat is cloud RADIUS? A guide to RADIUS as a service
- Technical guideCloud RADIUS vs on-premise RADIUS: decision guide for IT teams
- Technical guideHow to implement 802.1X with cloud RADIUS
Where it fits
- Pillar guideEnterprise WiFi security guide
- Purple productRADIUS as a service
- Free toolRADIUS setup guide
Related terms
Need more than a definition?
Talk to our team about how Purple combines guest WiFi, captive portals, RADIUS, and analytics into a single platform that runs on the access points you already own.