For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/v4/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/v4/llms-full.txt, and this page is available as Markdown at https://www.jumpserver.com/docs/v4/authentication/radius.md.
🎉 JumpServer v4.10.20 is available. See what's new →

Integrate RADIUS authentication

About RADIUS

Remote authentication Dial-In User Service (RADIUS) is a remote authentication mechanism based on the RADIUS protocol, primarily used for network access control. It provides Authentication, Authorization, and Accounting (AAA) functionalities.

How to configure

1

In the right area of the top navigation bar, click .

image
2

Navigate to the System settings > Authentication > Radius.

3

In the Radius field, check to enable RADIUS authentication.

4

In the Host field, type the RADIUS server IP address or domain name, such as "172.16.10.180".

5

In the Port field, type the RADIUS server port number. The default is "1812".

6

In the Secret field, type the shared secret key between the JumpServer and the RADIUS server. It functions like a password, encrypting sensitive information in RADIUS requests and responses to ensure secure communication.

7

Optionally, in the OTP in RADIUS field, check to enable RADIUS as the MFA backend. For more information, see Enable RADIUS MFA backend.

8

In the Organization field, after authentication and creation, the user will be added to the selected organization.

9

Click Submit.

Enable RADIUS MFA backend

This subsection describes how to configure RADIUS authentication as one of the MFA backends.

1

Configure RADIUS authentication by following the Integrate RADIUS authentication guide.

2

In the OTP in RADIUS field, check to enable RADIUS as the MFA backend.

When a user’s MFA is enabled, they can choose RADIUS authentication type during login.

image
3

Click Submit.