Keep your eduroam. Connect everyone and everything it was never built for.
eduroam looks after your staff and students. Purple adds what sits around it: sign-in with your university account, a private network for every room in halls and every device on campus, Passpoint and OpenRoaming for visitors, and guest WiFi for open days and conferences. On the access points you already own.
- Works alongside your eduroam and RADIUS
- Microsoft Entra ID and Google Workspace sign-in
- iPSK for every room in halls
- Passpoint and OpenRoaming

eduroam is solved. The rest of the campus network is not.
Most universities have run eduroam for years and it works. But a campus is more than staff and students on laptops. Halls full of consoles and smart TVs, labs full of kit that cannot log in, and thousands of visitors who were never in the federation all land on your network team. That gap usually shows up in four places.
A typical university today
- Move-in week buries the service desk in tickets about consoles, TVs and printers that cannot join
- Lab equipment, AV and building systems sharing one pre-shared key that never changes
- Conference delegates and visiting speakers from outside eduroam queuing for a guest code
- Open-day families on an unbranded guest network, with nothing passed to student recruitment
With Purple
- Every room in halls gets its own iPSK Private Area Network, so devices work like they do at home
- Every device gets its own key and VLAN, revocable one at a time
- Visitors with a Passpoint or OpenRoaming profile connect automatically, with no sign-in page
- A branded sign-in with UK GDPR consent sends open-day sign-ups straight to your CRM
Four networks your eduroam does not cover, run from one dashboard
Each one would normally be its own project with its own vendor. Purple runs all four on cloud RADIUS, next to the eduroam you already have.
Sign in with the university account
Identity-based WiFi through Microsoft Entra ID, Google Workspace or Okta. Joiners, movers and leavers handled by SCIM.
02 · Halls and devicesA private network for every room
iPSK gives each student and each device its own key, so consoles and smart TVs just work and stay isolated.
03 · RoamingPasspoint and OpenRoaming
Automatic, encrypted access for visitors, alumni and partners, beyond the eduroam federation.
04 · Guests and eventsOpen days, conferences and graduations
A branded sign-in for prospective students, families and delegates, kept apart from teaching and research networks.
Identity-based WiFi on the account they already use
eduroam handles roaming. On your own campus, staff and students can sign in once with the account that runs their email and Teams. Purple syncs with Microsoft Entra ID, Google Workspace, Okta and JumpCloud over SCIM, and group membership decides which VLAN and policy each person gets.
- Leavers lose access the moment their account is disabled in your directory
- Academics, professional services staff, students and contractors on separate VLANs with their own rules
- University-managed laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
- Entra ID Conditional Access honoured on every join, with no shared password anywhere
Every session is logged against a named person, device, time and location, so when your security team asks who was on the network, there is an answer.
Explore identity-based WiFi
Identity-basedAn at-home experience in halls, with enterprise security
Students arrive with games consoles, smart TVs, speakers and printers that cannot do 802.1X. iPSK gives every student their own Private Area Network: their devices find each other, and nobody else’s can see them. The same keys put lab equipment, AV and building systems on their own VLANs across the campus.
- Each room or resident gets a private network bubble, isolated from every other
- Students fetch their own key through a self-service page, signed in with their university account
- Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
- No per-device licence and no cap on devices per key, with MAC binding and one-at-a-time revocation
iPSKRoaming for everyone eduroam leaves out
eduroam only works for people whose institution belongs to it. Conference delegates, visiting industry partners, alumni and contractors usually do not. Passpoint and OpenRoaming connect them automatically and encrypted from the first moment, with no sign-in page, and Purple is an OpenRoaming identity provider for the Wireless Broadband Alliance.
- Profile-based Hotspot 2.0, encrypted from association, with no captive portal
- Your staff and students can roam to more than 5 million OpenRoaming hotspots worldwide
- Profiles are bound to identity, so connections survive iOS 18 MAC address rotation
- Runs on Passpoint-capable Cisco, HPE Aruba, Ruckus, Fortinet, Extreme, Juniper Mist and Ubiquiti UniFi access points
OpenRoamingTurn open days and conferences into named, consented contacts
Open days, applicant visit days, graduations, conferences, sports fixtures and summer lettings bring thousands of people on to campus who are not in eduroam. Purple gives them a branded sign-in moment that looks like your university, and gives your recruitment and events teams consented data they can act on.
- Branded captive portal with UK GDPR consent and a full audit trail
- Applicant and delegate sign-ups sent to HubSpot and your CRM through 400+ data connectors
- Purple Shield DNS content filtering on the guest network, IWF and Friendly WiFi certified
- Visitor numbers and dwell time by building for every open day and event
Open daysWhat eduroam covers, and what Purple adds around it
Purple works with your existing eduroam and RADIUS setup rather than replacing it. Here is where each one does the work.

A quieter move-in week, and fewer tickets all year
At one US university, Purple’s iPSK replaced the move-in scramble with self-service private networks across 40 housing buildings. Students onboarded their own consoles and TVs, and the service desk saw 60% fewer tickets.
Figures from a Purple iPSK deployment across 40 housing buildings at a US university, and Purple platform data and service terms.

Free brochure
Take this page into your next budget meeting
Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.
Get the brochure
Your name and email is all we need. The download appears straight away.
Live alongside eduroam, without new hardware
- 1
Keep eduroam as it is
Nothing changes for eduroam. Purple runs next to it on the access points you already own, on cloud RADIUS.
- 2
Connect your directory
Link Microsoft Entra ID or Google Workspace. Staff and student groups sync over SCIM.
- 3
Switch on, network by network
Start with halls over the summer, ready for move-in week, then add devices, roaming and guests.
See what Purple adds to your campus
Tell us about your campus, halls and eduroam setup, and we will show you how identity-based WiFi, iPSK, Passpoint and guest WiFi would run on your hardware.
- Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
- Single sign-on with Microsoft Entra ID, Google Workspace and Okta
- ISO 27001 certified, UK GDPR compliant, RADIUS regions in the UK, EU and US
Book a university demo
A 30-minute call with someone who knows university networks.
University WiFi questions, answered
What network, estates and student experience teams ask us most
Do we have to replace eduroam?
No. Purple works with your existing eduroam and RADIUS setup rather than replacing it. eduroam keeps doing what it does for staff and students, and Purple adds the networks it does not cover: identity-based sign-in, iPSK for halls and devices, Passpoint and OpenRoaming, and guest WiFi.
Do we need new access points?
No. Purple runs on the access points you already own, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. Passpoint needs Passpoint-capable access points from Cisco, HPE Aruba, Ruckus, Fortinet, Extreme, Juniper Mist or Ubiquiti UniFi. There is no on-premise RADIUS server to install.
How do consoles and smart TVs in halls connect?
With iPSK. Each student fetches their own key through a self-service page, signed in with their university account. Their devices find each other inside their own Private Area Network and stay isolated from everyone else’s.
How is Passpoint and OpenRoaming different from eduroam?
eduroam connects people from member institutions. Passpoint and OpenRoaming use the same profile-based approach for everyone else, so conference delegates, alumni and partners connect automatically and encrypted, with no sign-in page. Purple is an OpenRoaming identity provider, giving your community access to more than 5 million hotspots.
Which identity providers do you support?
Microsoft Entra ID, Google Workspace, Okta and JumpCloud sync over SCIM, and SAML and LDAP directories are supported too. Group membership decides which network and policy each person gets, and leavers lose access when their account is disabled.
Can open-day and conference sign-ups go to our CRM?
Yes. Visitors sign in through a branded page with UK GDPR consent and a full audit trail, and their details go to HubSpot or your CRM through 400+ data connectors. Guest traffic stays separate from teaching and research networks.
Where is our data held?
Purple has RADIUS regions in the UK, EU and US, is ISO 27001 certified and UK GDPR compliant, and has had zero data breaches since 2012.
Featured products for Higher education
The Purple platform pieces most Higher education venues deploy on day one.
Guest WiFi platform for Higher education
Captive Portals, analytics, and marketing automation as a cloud overlay.
Captive Portal software for Higher education
Modern Captive Portals with social login, SSO, and marketing consent.
Passwordless WiFi for Higher education
EAP-TLS, iPSK, and Passpoint - replace shared passwords with identity.
Recommended solution for Higher education
WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.
See WiFi for IT & network teams →Related pillar guides
The topical pillars most relevant to Higher education. Each guide is the canonical hub for that area of the platform.
Enterprise WiFi security
WPA3 Enterprise, 802.1X, EAP-TLS, iPSK, and cloud RADIUS for staff networks that pass audit.
Multi-tenant WiFi
iPSK per resident, the WiFi-bubble model, and the operational realities of long-term residential connectivity.
Captive portal
How the WiFi sign-in works, the eight authentication methods, and the join surface technical detail.
Further reading for Higher education
Technical guides, articles and customer stories for teams running WiFi in this sector.
Guides for Higher education
- University Campus WiFi: eduroam, Halls of Residence, and BYOD at Scale
- Eduroam and 802.1X: secure WiFi authentication for higher education | Purple
- Student WiFi: What Universities Need to Get Right
- How to Build a Campus WiFi Network: A University IT Guide
- University WiFi: How to Build a Campus-Wide Wireless Network
- Enterprise SCEP Setup Guide: Certificate-Based WiFi Authentication for Higher Education and Large Networks
- Is University WiFi Safe? A Guide for Students
- The Enterprise Guide to SCEP: Deploying Simple Certificate Enrollment Protocol for Automated Campus WiFi Security
From the blog
- Beyond eduroam: Why iPSK is the New Standard for Student Accommodation & Higher Education WiFi
- University WiFi 101: campus wireless design & security guide
- Student WiFi guide: fast, secure accommodation & campus access
- Purple Signals Higher Education Ambitions with Appointment of VP Education Tim Peers
Related industries
Other verticals running on the same Purple platform.
Speak to an expert
Tell us about your venues and we'll show you how Purple fits.