Back
What is the Best Cloud RADIUS for SimpleMDM Environments?

What is the Best Cloud RADIUS for SimpleMDM Environments?

What is the Best Cloud RADIUS Solution for SimpleMDM Environments?

When choosing the best cloud RADIUS solution for SimpleMDM, there are a few factors you must consider:

  • Integration: Confirming a RADIUS solution integrates with your environment (MDM, identity provider, network hardware), should be a priority. Additionally, you should consider any future needs you can predict, such as changes to your cloud environment, that may impact your current decision.
  • Cost: Many companies do not have an unlimited budget for RADIUS solutions, so cost is an essential comparison point between providers. Aside from the sticker price of the RADIUS solution, cost comparisons should also include pricing structure, tiers, whether or not the pricing is transparent, and more.
  • Features: A RADIUS solution’s feature set determines how much control administrators have over network authentication and general security posture. However, the most feature-rich option is not automatically the best RADIUS solution, so weight these features against your organization’s needs.

Now that we’ve covered basic comparison points for a RADIUS solution, we need to cover what options are available for SimpleMDM and how we evaluate them.

What Cloud RADIUS Services are Available for SimpleMDM?

There are several cloud RADIUS solutions that can integrate with SimpleMDM environments that we will evaluate. Some of the most popular options include: EZRADIUS, JumpCloud, and Portnox Cloud. In this article, we will compare and evaluate each of them to see what is the best Cloud RADIUS for SimpleMDM.

EZRADIUS: A Feature-Rich RADIUS Solution for SimpleMDM

EZRADIUS is a cloud-based RADIUS solution built for organizations in the Microsoft ecosystem. In addition to its cloud offering, EZRADIUS includes an optional free local RADIUS proxy that can be stood up as an offline backup or to assist with authentication in high-latency networks. Together, with its native Entra ID and Intune integration, EZRADIUS is a strong candidate for replacing a legacy NPS deployment.

EZRADIUS supports two main authentication models: certificate-based EAP-TLS and Entra ID credential-based EAP-TTLS. EZRADIUS is designed to integrate with any PKI, including Cloud PKI, AD CS, as well as Keytos’ own EZCA. EZRADIUS can also enforce Entra ID group membership and validate Intune device compliance, allowing for greater control over network authentication. However, one major caveat to EZRADIUS is that it only supports Entra ID as an SSO provider, so teams with no Microsoft presence may want to consider other options.

Additionally, EZRADIUS has dedicated documentation for integrating with SimpleMDM.

In conclusion, EZRADIUS has first-party documentation for integrating with SimpleMDM, and has backwards compatibility and support with legacy protocols and devices. In addition, it comes with a local RADIUS proxy for high latency networks or to work as a fallback. However, it only supports Entra ID as an SSO provider.

Learn More About EZRADIUS for SimpleMDM

JumpCloud: A Platform Beyond RADIUS

JumpCloud is a cloud directory that includes an MDM, SSO, and VPN authentication. For teams that already have an IdP, these features may be unnecessary or redundant. But this can be appealing to organizations that need a bundled platform for an identity, authentication, and device management. However, the pricing for packages is quote-based and therefore not publicly available. However, when RADIUS is purchased à la carte it is priced at $3 USD per user per month.

There are two important considerations that should be weighed for SimpleMDM with JumpCloud. First, JumpCloud’s native PKI and SCEP require JumpCloud MDM. In a SimpleMDM environment there’s no supported path to JumpCloud’s SCEP, so you are reliant on certificate issuance through bring-your-own-certificate workflows rather than any native PKI and SCEP issuance you get from EZRADIUS. Second, while JumpCloud has SimpleMDM integration for SSO/SAML, at the time of writing there is no written documentation for RADIUS integration, which will make the setup harder.

The bottom line is that JumpCloud is best for teams that do not currently have an IdP or want a bundled identity/MDM/VPN authentication platform. At the same time, certificate support is less mature than in EZRADIUS and Portnox Cloud, it lacks transparent pricing, and there is no first-party RADIUS SimpleMDM documentation.

Portnox Cloud: A Network Access Control with RADIUS

Portnox Cloud is a cloud-native Network Access Control (NAC) with RADIUS bundled in. Its biggest differentiators are its NAC features, including continuous posture analysis, automated device quarantine and remediation, and IoT fingerprinting. However, agentless posture is unavailable for SimpleMDM since it has no native integration to ingest SimpleMDM’s compliance data. This will not prevent device authentication, but this in combination with the lack of SimpleMDM-specific documentation weakens the value proposition.

Portnox offers an endpoint agent as a workaround: AgentP. This is software that must be installed on a user device to perform continuous posture assessment and compliance enforcement. Since Portnox Cloud is positioned (and priced) as a NAC platform, if you are mainly using it to push certificates through SimpleMDM, you are paying a premium while losing access to Portnox Cloud’s best features.

What is the Best Cloud RADIUS Solution for SimpleMDM?

For most organizations, especially if you are in the Microsoft ecosystem, EZRADIUS is usually the best cloud RADIUS solution for SimpleMDM.

The TL;DR is:

  • Choose EZRADIUS if you are looking for a highly capable RADIUS solution that is best for teams that are migrating, hybrid-joined, or are already within the Microsoft ecosystem.
  • Choose JumpCloud if you want a fully featured IdP and want an MDM, SSO, VPN and RADIUS from a single platform.
  • Choose Portnox Cloud if you want broader network access control such as posture-based enforcement and IoT fingerprinting. Just note that Portnox has no agentless integration to pull SimpleMDM’s compliance data.

If you want to see how EZRADIUS integrate with SimpleMDM, EZRADIUS has dedicated documentation for integrating with SimpleMDM. If you want to see how EZRADIUS can support SimpleMDM RADIUS authentication and broader RADIUS use cases, talk to a RADIUS expert and map out the right approach for your environment.

How Can I Get Started with EZRADIUS for SimpleMDM?

Start Your Free Trial of EZRADIUS

Also make sure to book a call with one of our RADIUS experts to see how EZRADIUS can support your SimpleMDM deployment and broader authentication needs.

Book a Call with a RADIUS Expert