Skip to main content
WiFi for universities

Keep your eduroam. Connect everyone and everything it was never built for.

eduroam looks after your staff and students. Purple adds what sits around it: sign-in with your university account, a private network for every room in halls and every device on campus, Passpoint and OpenRoaming for visitors, and guest WiFi for open days and conferences. On the access points you already own.

  • Works alongside your eduroam and RADIUS
  • Microsoft Entra ID and Google Workspace sign-in
  • iPSK for every room in halls
  • Passpoint and OpenRoaming
Students and staff crossing a busy university campus between lectures, phones and laptops in hand
Room 214 connectedConsole, TV and laptop in a private network bubble
Joined via OpenRoamingConference delegate, no sign-in page
Trusted by universities includingUniversity of SouthamptonUniversity of UtahGeorgetown UniversityUC San DiegoUniversity of SheffieldUniversity of LeedsEastern Michigan University
The gap

eduroam is solved. The rest of the campus network is not.

Most universities have run eduroam for years and it works. But a campus is more than staff and students on laptops. Halls full of consoles and smart TVs, labs full of kit that cannot log in, and thousands of visitors who were never in the federation all land on your network team. That gap usually shows up in four places.

A typical university today

  • Move-in week buries the service desk in tickets about consoles, TVs and printers that cannot join
  • Lab equipment, AV and building systems sharing one pre-shared key that never changes
  • Conference delegates and visiting speakers from outside eduroam queuing for a guest code
  • Open-day families on an unbranded guest network, with nothing passed to student recruitment

With Purple

  • Every room in halls gets its own iPSK Private Area Network, so devices work like they do at home
  • Every device gets its own key and VLAN, revocable one at a time
  • Visitors with a Passpoint or OpenRoaming profile connect automatically, with no sign-in page
  • A branded sign-in with UK GDPR consent sends open-day sign-ups straight to your CRM
One platform alongside eduroam

Four networks your eduroam does not cover, run from one dashboard

Each one would normally be its own project with its own vendor. Purple runs all four on cloud RADIUS, next to the eduroam you already have.

Staff and students

Identity-based WiFi on the account they already use

eduroam handles roaming. On your own campus, staff and students can sign in once with the account that runs their email and Teams. Purple syncs with Microsoft Entra ID, Google Workspace, Okta and JumpCloud over SCIM, and group membership decides which VLAN and policy each person gets.

  • Leavers lose access the moment their account is disabled in your directory
  • Academics, professional services staff, students and contractors on separate VLANs with their own rules
  • University-managed laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
  • Entra ID Conditional Access honoured on every join, with no shared password anywhere

Every session is logged against a named person, device, time and location, so when your security team asks who was on the network, there is an answer.

Explore identity-based WiFi
A lecturer and a student connecting laptops in a university library study spaceIdentity-based
Halls and campus devices

An at-home experience in halls, with enterprise security

Students arrive with games consoles, smart TVs, speakers and printers that cannot do 802.1X. iPSK gives every student their own Private Area Network: their devices find each other, and nobody else’s can see them. The same keys put lab equipment, AV and building systems on their own VLANs across the campus.

  • Each room or resident gets a private network bubble, isolated from every other
  • Students fetch their own key through a self-service page, signed in with their university account
  • Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
  • No per-device licence and no cap on devices per key, with MAC binding and one-at-a-time revocation
Explore xPSK
A student in a hall of residence bedroom gaming on a console connected to a smart TViPSK
Passpoint and OpenRoaming

Roaming for everyone eduroam leaves out

eduroam only works for people whose institution belongs to it. Conference delegates, visiting industry partners, alumni and contractors usually do not. Passpoint and OpenRoaming connect them automatically and encrypted from the first moment, with no sign-in page, and Purple is an OpenRoaming identity provider for the Wireless Broadband Alliance.

  • Profile-based Hotspot 2.0, encrypted from association, with no captive portal
  • Your staff and students can roam to more than 5 million OpenRoaming hotspots worldwide
  • Profiles are bound to identity, so connections survive iOS 18 MAC address rotation
  • Runs on Passpoint-capable Cisco, HPE Aruba, Ruckus, Fortinet, Extreme, Juniper Mist and Ubiquiti UniFi access points
Explore Passpoint
Delegates arriving at a university conference centre, phones connecting automatically as they walk inOpenRoaming
Guests and events

Turn open days and conferences into named, consented contacts

Open days, applicant visit days, graduations, conferences, sports fixtures and summer lettings bring thousands of people on to campus who are not in eduroam. Purple gives them a branded sign-in moment that looks like your university, and gives your recruitment and events teams consented data they can act on.

  • Branded captive portal with UK GDPR consent and a full audit trail
  • Applicant and delegate sign-ups sent to HubSpot and your CRM through 400+ data connectors
  • Purple Shield DNS content filtering on the guest network, IWF and Friendly WiFi certified
  • Visitor numbers and dwell time by building for every open day and event
Explore guest WiFi
Student ambassadors welcoming prospective students and parents at a university open dayOpen days
eduroam plus Purple

What eduroam covers, and what Purple adds around it

Purple works with your existing eduroam and RADIUS setup rather than replacing it. Here is where each one does the work.

Who needs to connect
eduroam on its own
eduroam plus Purple
Staff and students on campus
eduroam login, with RADIUS servers and certificates your team runs
Also sign in with Entra ID or Google Workspace, certificates issued and revoked for you
Consoles, TVs and speakers in halls
Cannot do 802.1X, so they end up on a shared key or a ticket
Every room its own iPSK Private Area Network
Lab, AV and building devices
One shared key across hundreds of devices
A private key and VLAN per device, revocable one at a time
Delegates, alumni and partners
Connect only if their institution is in eduroam
Connect automatically through Passpoint and OpenRoaming
Open-day visitors and families
Outside eduroam, so a shared guest code or an unbranded page
A branded sign-in with UK GDPR consent, sent to your CRM
Hardware
Often tied to one vendor’s access control licence
Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi and more
A university IT and estates team reviewing a calm network dashboard in their office
Built for a university network team

A quieter move-in week, and fewer tickets all year

At one US university, Purple’s iPSK replaced the move-in scramble with self-service private networks across 40 housing buildings. Students onboarded their own consoles and TVs, and the service desk saw 60% fewer tickets.

60%
fewer helpdesk tickets at move-in, across 40 university housing buildings
80%
fewer IT tickets with identity-based staff WiFi
5M+
OpenRoaming hotspots your staff and students can roam to
0
data breaches since 2012. ISO 27001 certified.

Figures from a Purple iPSK deployment across 40 housing buildings at a US university, and Purple platform data and service terms.

Cover of the Purple Higher education WiFi brochure

Free brochure

Take this page into your next budget meeting

Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.

Get the brochure

Your name and email is all we need. The download appears straight away.

How it works

Live alongside eduroam, without new hardware

  1. 1

    Keep eduroam as it is

    Nothing changes for eduroam. Purple runs next to it on the access points you already own, on cloud RADIUS.

  2. 2

    Connect your directory

    Link Microsoft Entra ID or Google Workspace. Staff and student groups sync over SCIM.

  3. 3

    Switch on, network by network

    Start with halls over the summer, ready for move-in week, then add devices, roaming and guests.

Talk to our education team

See what Purple adds to your campus

Tell us about your campus, halls and eduroam setup, and we will show you how identity-based WiFi, iPSK, Passpoint and guest WiFi would run on your hardware.

  • Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
  • Single sign-on with Microsoft Entra ID, Google Workspace and Okta
  • ISO 27001 certified, UK GDPR compliant, RADIUS regions in the UK, EU and US

Book a university demo

A 30-minute call with someone who knows university networks.

University WiFi questions, answered

What network, estates and student experience teams ask us most

Do we have to replace eduroam?

No. Purple works with your existing eduroam and RADIUS setup rather than replacing it. eduroam keeps doing what it does for staff and students, and Purple adds the networks it does not cover: identity-based sign-in, iPSK for halls and devices, Passpoint and OpenRoaming, and guest WiFi.

Do we need new access points?

No. Purple runs on the access points you already own, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. Passpoint needs Passpoint-capable access points from Cisco, HPE Aruba, Ruckus, Fortinet, Extreme, Juniper Mist or Ubiquiti UniFi. There is no on-premise RADIUS server to install.

How do consoles and smart TVs in halls connect?

With iPSK. Each student fetches their own key through a self-service page, signed in with their university account. Their devices find each other inside their own Private Area Network and stay isolated from everyone else’s.

How is Passpoint and OpenRoaming different from eduroam?

eduroam connects people from member institutions. Passpoint and OpenRoaming use the same profile-based approach for everyone else, so conference delegates, alumni and partners connect automatically and encrypted, with no sign-in page. Purple is an OpenRoaming identity provider, giving your community access to more than 5 million hotspots.

Which identity providers do you support?

Microsoft Entra ID, Google Workspace, Okta and JumpCloud sync over SCIM, and SAML and LDAP directories are supported too. Group membership decides which network and policy each person gets, and leavers lose access when their account is disabled.

Can open-day and conference sign-ups go to our CRM?

Yes. Visitors sign in through a branded page with UK GDPR consent and a full audit trail, and their details go to HubSpot or your CRM through 400+ data connectors. Guest traffic stays separate from teaching and research networks.

Where is our data held?

Purple has RADIUS regions in the UK, EU and US, is ISO 27001 certified and UK GDPR compliant, and has had zero data breaches since 2012.

Recommended solution for Higher education

WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.

See WiFi for IT & network teams →

Speak to an expert

Tell us about your venues and we'll show you how Purple fits.