---
title: RADIUS Authentication for Access Server VPN Users
canonical: https://openvpn.net/as-docs/radius/
product: Access Server Docs
description: Access Server supports Remote Authentication Dial-In User Service (RADIUS) as an authentication method.
---

# RADIUS Authentication for Access Server VPN Users

Access Server supports Remote Authentication Dial-In User Service (RADIUS) as an authentication method.

You can configure it directly in the Admin Web UI. Sign in to your Admin Web UI and click **Authentication \> Settings**. Alternatively, you can configure this from the command line by changing the configuration key, `auth.module.type`.

> **Note**
>
> Access Server 2.10 and newer support multiple authentication systems for your users. For instance, you can set up your end users with LDAP authentication integrated with Active Directory and create your VPN administrator accounts with local authentication. For more information, refer to [Authentication System](https://openvpn.net/as-docs/user-authentication-system.md).

## RADIUS authentication overview

Remote Authentication Dial-In User Service (RADIUS) is another protocol used for directory service authentication. You can use RADIUS to integrate Access Server with directory services such as Active Directory, Okta, and open-source programs.

RADIUS requires configuration in the Admin Web UI before it can be used to authenticate users. These settings include which server to contact and any required shared secret code to access the authentication backend.

Once configured, Access Server checks the RADIUS server to validate credentials when a user connects to the VPN.

> **Important**
>
> Access Server can't make password changes for users in RADIUS.

## RADIUS tutorials

- [Tutorial: Configure JumpCloud with Access Server via RADIUS](https://openvpn.net/as-docs/tutorials/tutorial--jumpcloud-radius.md)
- [Tutorial: Configure Active Directory (Windows Server) RADIUS Protocol for Access Server](https://openvpn.net/as-docs/tutorials/tutorial--microsoft-ad-radius.md)
- [Tutorial: Integrate Okta with Access Server via RADIUS](https://openvpn.net/as-docs/tutorials/tutorial--okta-radius.md)
- [Tutorial: Manage the RADIUS authentication method from the command-line interface](https://openvpn.net/as-docs/tutorials/tutorial--radius-command-line.md)
- Set up [group mapping for RADIUS authentication](https://openvpn.net/as-docs/radius-group-mapping.md) using a post-auth script.

---

Prev: [LDAP](https://openvpn.net/as-docs/ldap.md)
Next: [SAML](https://openvpn.net/as-docs/saml.md)
Index: https://openvpn.net/as-docs/llms.txt