Every Layer of Network Identity, from Certificates to Access Policies
Certificates, RADIUS, device trust, conditional access, federation - it sounds like a lot, but it's all one platform. We handle the infrastructure in the cloud, so you can get your network identity running in hours instead of weeks.
Not sure which product you need?
Take our 2-minute WiFi Solution Finder →What's in the Identity Platform?
Pick the solution that fits how your users connect
Cloud RADIUS
Skip the server room. Our cloud-hosted RADIUS handles authentication for thousands of users across multiple sites - with built-in redundancy and zero hardware to maintain.
Captive Portal
Give your guests a great first impression with custom login pages. They can sign in with social accounts, email, or even pay for access - whatever works best for your venue.
WPA-Enterprise
The gold standard for secure corporate WiFi using 802.1X authentication. Your employees log in with their existing work credentials - no extra passwords to remember, no security headaches for IT.
SCEP
Say goodbye to WiFi passwords forever. Certificates get installed automatically on your managed devices, and users connect without typing anything.
Cloud PKI
Ditch WiFi passwords entirely. Our cloud-managed private CA issues and renews certificates automatically, so users connect securely without typing anything.
Enrollment Portal
One link to connect any device. Users visit your branded portal, authenticate, and their device gets a certificate and WiFi profile automatically. No MDM required.
Device Portal
Let users manage their own WiFi devices. They can view registered devices, revoke lost ones, and re-enroll new devices - all without calling IT.
Passpoint
Your users' phones connect to WiFi automatically - just like they do with cell towers. No login screens, no hassle. It just works.
OpenRoaming RADIUS
Join a worldwide network of WiFi hotspots via OpenRoaming. Your visitors from partner organizations connect instantly, and your users get the same treatment when they travel.
OpenRoaming OSU
Users can set themselves up for global WiFi roaming with one click. No IT tickets, no waiting - they just visit a web page and they're done.
WiFi Calling
Help mobile carriers offload traffic to WiFi without dropping calls. Users switch seamlessly between cell and WiFi - they won't even notice.
IoT Authentication
Get your sensors, cameras, and smart devices online securely. We'll put them on their own network segment automatically - no manual configuration needed.
WiFi ITDR
Detect identity-based attacks against your WiFi network in real time. Credential stuffing, impossible travel, MAC spoofing, rogue devices - caught before damage is done.
Network Intelligence
See what's really happening on your WiFi network. Track authentication patterns, spot anomalies, and get actionable insights — all from a single dashboard.
AI Center
Machine learning built into every connection. Adaptive authentication, anomaly detection, smart capacity planning, and automated threat response — intelligence that makes your network smarter over time.
AI Agent Identity
Enroll, authenticate, and monitor AI agents on your physical network. Purpose-scoped X.509 certificates for copilots, autonomous systems, and MCP servers — with behavioral baselines that detect compromised agents application-layer tools can't see.
Webhooks & API
Automate everything. Get real-time event notifications via webhooks and control your entire IronWiFi setup programmatically through our REST API.
Conditional Access
Define who gets on your network, what they can access, and when — all from a visual policy builder. Pre-built compliance templates for HIPAA, PCI-DSS, and more.
Identity Provisioning
Sync users from Microsoft Entra ID, Okta, and Google Workspace automatically. When someone leaves, their WiFi access disappears instantly — certificates revoked, devices removed.
Device Trust
Check device posture in real time before granting WiFi access. Non-compliant devices get quarantined automatically — no exceptions, no manual review.
Terraform Provider
Define networks, policies, certificates, and tenants in Terraform. Version-control your WiFi infrastructure and automate deployments across hundreds of sites.
Roaming Analytics
Track every roaming session across your OpenRoaming network. Know which identity providers send you the most visitors and calculate the real ROI of your WiFi investment.
Not Sure Where to Start?
Here's a quick guide to help you pick the right solution
I Need Guest WiFi
Go with Captive Portal. You'll get custom login pages, social sign-in, and you can collect visitor info for marketing.
I Need Employee WiFi
Try WPA-Enterprise. It hooks into your Active Directory or LDAP, so employees use their existing credentials.
I Hate Login Screens
You'll love Passpoint. Devices connect automatically in the background - no captive portals, no clicking anything.
I Want to Ditch Passwords
Check out Cloud PKI. Our private CA issues certificates automatically, and Enrollment Portal lets users onboard with one link - no passwords, no MDM required.
Users Need to Manage Devices
Device Portal lets users view, revoke, and re-enroll their own WiFi devices. IT gets fewer tickets, users get instant control.
I Want Global Roaming
OpenRoaming connects you to 3M+ hotspots worldwide. Your users roam seamlessly, and visitors from partner networks do too.
I Want Self-Service Setup
OpenRoaming OSU lets users set up roaming profiles themselves - just one click on a web page.
I'm a Mobile Carrier
WiFi Calling is built for you. Offload traffic to WiFi while keeping voice quality crystal clear.
I Have IoT Devices
IoT Authentication handles sensors and cameras that can't type passwords. We'll segment them automatically.
I Need Access Policies
Conditional Access lets you build IF/THEN rules for network access — by user group, device posture, time of day, or compliance status.
I Want Directory Sync
Identity Provisioning syncs users from Microsoft Entra ID, Okta, or Google Workspace. When someone leaves, their WiFi access vanishes automatically.
I Need Endpoint Compliance
Device Trust checks device posture in real time. Non-compliant devices get quarantined to a remediation VLAN automatically.
I Want Infrastructure as Code
Terraform Provider lets you define networks, policies, and tenants as code. Version-control everything and deploy with CI/CD.
I Want Roaming Insights
Roaming Analytics shows you who's roaming, where they're from, and what it's worth. Track sessions, IdPs, and calculate ROI.
What Does It Cost Compared to On-Premise?
Here's what you save by going cloud instead of on-premise
Numbers based on a typical 500-1000 user setup. On-premise costs include servers, software, maintenance, and the time your IT team spends on it.
Got Questions? We've Got Answers
Here's what people usually ask us about WiFi authentication
Think of it this way: Captive Portal is great for visitors - they see a login page where they can sign in with email or social accounts. WPA-Enterprise is for your employees - they use their work credentials, and it's much more secure. Most of our customers use both: Captive Portal for guests and WPA-Enterprise for staff.
Imagine if your phone connected to WiFi as easily as it connects to cell towers - that's OpenRoaming. Once your users are set up, they automatically connect to any of the 3 million+ participating hotspots worldwide. No login screens, no passwords. It's like cellular roaming, but for WiFi. Learn more about OpenRoaming RADIUS.
SCEP is how you get rid of WiFi passwords entirely. Instead of passwords, your devices get certificates that prove who they are. The best part? It all happens automatically through your MDM (like Intune, Jamf, or Workspace ONE). Users never have to type anything - their devices just connect.
Pretty much any access point you already have. We work with Cisco, Aruba, Ubiquiti UniFi, Ruckus, Meraki, Cambium, TP-Link, EnGenius, and loads more. If your access point supports RADIUS or external captive portals, it'll work with IronWiFi. Check our complete list of compatible hardware to find yours.
Absolutely - they're designed to work together. A common setup is Captive Portal for guests, WPA-Enterprise with SCEP certificates for employees, and OpenRoaming for seamless connectivity when people travel. The best part? You manage everything from one dashboard with unified analytics and user management.
Passpoint (you might also hear it called Hotspot 2.0) makes WiFi work like your cell phone does. Your device automatically finds and connects to supported networks - no login screens, no clicking"I agree." It's the WiFi Alliance's standard for seamless, secure connections, and it's built into most modern phones and laptops.
Talk to a WiFi Identity Specialist
- See IronWiFi working with your hardware
- Get a deployment plan for your network
- 30-minute call — no pitch deck
Set up in under 15 minutes — no credit card required