---
title: RADIUS Group Mapping in Access Server
canonical: https://openvpn.net/as-docs/radius-group-mapping/
product: Access Server Docs
---

# RADIUS Group Mapping in Access Server

You can configure Access Server to use Remote Authentication Dial-in User Service (RADIUS) to provide user authentication. Access Server becomes the RADIUS client, communicating with your RADIUS server containing user credentials. RADIUS is an out-of-the-box Access Server authentication method configured in the Admin Web UI. However, you must configure user permissions and group assignments separately. You can use a Python script to automate this with your centralized authentication.

After successful authentication, the Access Server runs a post-auth (post-authentication) script written in Python3 to perform additional tasks. We provide a post-auth script sample for you to customize for your RADIUS server.

- [Tutorial: How to Set Up RADIUS Group Mapping with a Post-auth Script](https://openvpn.net/as-docs/tutorials/tutorial--post-auth-radius-group-mapping.md)

---

Prev: [LDAP Group Mapping](https://openvpn.net/as-docs/ldap-group-mapping.md)
Next: [SAML Group Mapping](https://openvpn.net/as-docs/saml-group-mapping.md)
Index: https://openvpn.net/as-docs/llms.txt