Contact Us

Migrate Windows NPS to the Cloud with EZRADIUS

Retire Your On-Premises NPS Servers
and Save Up to 75% on RADIUS Costs

Replace aging NPS infrastructure with a cloud-native RADIUS built natively for Microsoft Entra ID and Intune

  • No hardware, no patching, no HA complexity, EZRADIUS handles it all
  • Native Entra ID and Intune integration, no ghost accounts, no sync jobs
  • Keep your existing PKI. AD CS, Microsoft Cloud PKI, and EZCA all supported
  • From $1 / active identity - Pay only for who connects
1,000+
Customers trust EZRADIUS
for their Cloud RADIUS
45M+
RADIUS authentications
per month by EZRADIUS
10+
RADIUS Regions
to choose from
99.95%
Enterprise-Tier SLA

The NPS Problem Your IT Team Knows Too Well

NPS was built for a different era. Here's why organizations are moving on.


  • Fully hosted, no servers to run, patch, or monitor

  • Real-time Entra ID auth via Microsoft Graph, no ghost accounts, no sync lag

  • Intune compliance enforced at authentication time

  • Multi-region, multi-AZ by default, up to 99.95% uptime SLA

  • Full audit log export to Sentinel, Splunk, and any SIEM

  • Pay per active identity from $1/month, no hardware investment

Windows NPS


  • You deploy, patch, and monitor NPS servers yourself

  • Relies on AD sync, delayed group data and ghost accounts

  • No visibility into whether a device is managed or compliant at login

  • Manual HA setup: redundant servers, load balancers, on-call coverage

  • Limited log retention, gaps in audit trail and investigations

  • Fixed infrastructure cost whether you have 10 or 10,000 auth requests

Migration in 3 Easy Steps. No Network Downtime.

It's easy to try out EZRADIUS alongside your existing NPS deployment and make the switch when you're ready.

1

Connect Your Existing PKI & Certificates

Add your AD CS, Microsoft Cloud PKI, or EZCA certificate authorities in just a few clicks. No changes to your existing certificate lifecycle.

2

Point Your Network to EZRADIUS

Update your network controllers to point to the closest EZRADIUS region. Classic RADIUS and RadSec both supported.

3

Authenticate to Your Networks

Client devices connect using their existing certificates and credentials. Windows, macOS, Android, iOS, and Linux all supported.

Securely Authenticate Every User & Device

EZRADIUS supports the most popular authentication methods your organization relies on today

EAP-TLS

Existing PKI Infrastructure

  • Support for AD CS, Microsoft Cloud PKI, and third-party CAs
  • No disruption to existing certificate lifecycle or enrollment processes
  • No passwords to share, leak, or manage.
EAP-TTLS

Entra ID Credentials

  • Out-of-the-box support for Entra ID credentials without certificates
  • Real-time Entra ID access and group checks. No sync jobs required.
  • Perfect for BYOD or non-certificate use cases
MAB

MAC Address Bypass

  • Authenticate printers, IoT devices, and other non-certificate endpoints
  • Centrally manage and audit MAB devices in the EZRADIUS portal
  • Specify custom VLANs for MAB devices
Legacy

Legacy Protocol Support

  • Full support for PAP and MSCHAPv2 for backward compatibility
  • Ensures older devices and systems stay connected during migration
  • Migrate at your own pace without forcing a device refresh

Broad Ecosystem Support

EZRADIUS integrates seamlessly with your existing network infrastructure, MDM platforms, and client devices to ensure a smooth and secure migration.

EZRADIUS network architecture diagram—replaces Windows NPS with cloud-native RADIUS

Transparent Pricing

No hardware investment. No long-term contracts. No hidden fees. Just pay for what you use and cancel anytime.

Dedicated

All the convenience of hosted RADIUS with your own dedicated infrastructure

  • Everything in Basic, plus:
  • Dedicated infrastructure
  • Choose a region closest to you
  • Full dynamic IP address support
  • 24/7 support within 24 hours

Monthly subscription cost

$400 USD (includes 200 users)

Monthly cost per active identity

1-200Included in subscription
201-500$1 USD each
501-1,000$0.40 USD each
1,001-10,000$0.20 USD each
10,000+$0.10 USD each
Request demo

Enterprise

Custom, multi-region deployments with the highest SLAs and support

  • Everything in Dedicated, plus:
  • Choose the region(s) closest to you
  • Azure GCC & GCC High support
  • Custom hosting options
  • Up to 99.95% availability
  • 24/7 support within 1 hour

Monthly subscription cost

$3,500 USD (includes 10,000 users)

Monthly cost per active identity

1-10,000Included in subscription
10,000+$0.10 USD each
Request demo
See Full Pricing Details & Calculator

No long-term contracts  ·  No hidden fees  ·  Cancel anytime

Ready to Decommission Your NPS Servers?

Start with a free trial, or book a free migration assessment. Our specialists will calculate your exact savings and build a risk-free migration plan tailored to your environment.

No credit card required  ·  No long-term contracts  ·  Free migration assessment included

Frequently Asked Questions

Is there a trial available?

Yes! You can start a free trial of EZRADIUS today with no credit card required. Experience the benefits of cloud RADIUS firsthand and see how easy it is to migrate from NPS.

How do I know if EZRADIUS is right for my organization?

If you're looking to reduce the overhead of managing on-prem NPS servers, improve security with native Entra ID integration, and save costs with a pay-as-you-go model, then EZRADIUS is a great fit. We recommend starting with a free migration assessment to see the potential benefits for your specific environment.

How long does migration typically take?

Migration timelines can vary based on the size and complexity of your environment, but many organizations are able to complete the migration from NPS to EZRADIUS within a few days. Because there's no hardware to deploy and no complex HA setup required, the process is often much faster than traditional RADIUS migrations. We recommend starting with a free migration assessment to get a better idea of the timeline for your specific environment.

How does the migration process work?

You can run EZRADIUS in parallel with your existing NPS deployment to test and validate in your environment. When you're ready, simply update your network controllers to point to EZRADIUS and decommission your NPS servers at your own pace.

Can I run EZRADIUS alongside NPS during migration?

Yes! You can run EZRADIUS in parallel with your existing NPS deployment to test and validate in your environment. When you're ready, simply update your network controllers to point to EZRADIUS and decommission your NPS servers at your own pace.

Will I need to change my existing certificates or PKI setup?

No changes needed. EZRADIUS supports your existing AD CS, Microsoft Cloud PKI, or third-party CAs. Just add your CA certificates to your EZRADIUS policy and optionally issue a new server certificate from your existing CA and you're good to go.

Can I use my existing AD CS certificates?

Yes! You can use your existing AD CS certificates with EZRADIUS. Just add your CA certificates to your EZRADIUS policy and optionally issue a new server certificate from AD CS and you're good to go.

Do I need Entra ID P1/P2 licenses?

No, EZRADIUS does not require any specific Entra ID licenses. You can use your existing Entra ID tenant and user accounts without needing to purchase additional licenses. We integrate with Entra ID using the Microsoft Graph API, so we can authenticate users and check group memberships in real-time without any dependency on specific license tiers.

What network vendors are supported?

EZRADIUS supports nearly every network controller that supports RADIUS or RadSec. Simply point it at the EZRADIUS IP addresses and you're good to go. For a full list of our tested and validated network vendors, check out our supported network vendors page.

What if I have a global workforce with multiple offices?

EZRADIUS has 10+ global regions to choose from, so you can select the one closest to each of your offices for optimal performance. Our Dedicated and Enterprise plans also offer custom regions, network isolation, and dynamic IP support for complex global deployments.

Do I need to change tiers or plans if I add more users or offices?

No, EZRADIUS is designed to scale seamlessly with your organization. You can add more users or offices without needing to change your existing plan, and you only ever pay for the users and devices that authenticate each month. There are no plan limits on the number of users, devices, or offices you can have.