---
title: 'Tutorial: Configure JumpCloud with Access Server via RADIUS'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--jumpcloud-radius/
product: Access Server Docs
description: Configure Access Server to authenticate with your JumpCloud user directory using RADIUS authentication. Follow this guide to set up RADIUS authentication.
---

# Tutorial: Configure JumpCloud with Access Server via RADIUS

## Overview

You can configure Access Server to authenticate against JumpCloud via RADIUS. This document outlines the steps to set this up.

This setup expects you to have the following:

- A JumpCloud account with admin access and an existing user directory.
- Access Server installed with a public IP address.

## Prerequisites

- Installed Access Server
- JumpCloud directory

## Step 1: Add a JumpCloud RADIUS server

Start by creating the JumpCloud RADIUS server. JumpCloud hosts the server for you, so you don't need to set up any hardware.

1. Sign into the JumpCloud admin console.
2. Click **RADIUS** under **User Authentication**.
3. Click **( + )** to add a new RADIUS server.
4. Configure the RADIUS server:
   - On the **Details** tab:
     - Enter a friendly name for the server in **Server Name**.
     - Enter your Access Server's IP address in **IP Address**.
     - Copy the **Shared Secret**.
   - On the **Authentication** tab:
     - Select **JUMPCLOUD** from the **Identity Provider** dropdown.
     - Uncheck **Require secure protocols** and agree to the risks in the modal.
     - Select **Password** as the authentication method.
     - (Optional) Enable MFA.
   - On the **User Groups** tab:
     - Select the appropriate group(s) of users to grant access.
   - Click **Save**.

> **Important**
>
> Ensure you enter your Access Server's public IP address. It won't work with a private IP address.

## Step 2: Configure RADIUS on Access Server

Now you can configure RADIUS with Access Server using your web-based Admin Web UI.

1. Sign in to the Admin Web UI.
2. Click **Authentication \> RADIUS**.
3. Enable RADIUS authentication.
4. Enter the JumpCloud RADIUS server details in **Hostname or IP Address**.

   > **Tip**
   >
   > You can find the JumpCloud RADIUS server details in their [documentation](https://jumpcloud.com/support/configure-a-wap-vpn-or-router-for-radius), then choose the server closest to you.
5. Enter the shared secret from the JumpCloud RADIUS server in **Shared Secret**.
6. Set the **Verify Message-Authenticator Attribute** to **No**.

   > **Note**
   >
   > **Message-Authenticator not currently supported**
   >
   > At the time of publication, this RADIUS service doesn't currently return a Message-Authenticator as part of its response.
7. Select **MS-CHAP v2** (recommended) as the **RADIUS Authentication Method**.
8. Select **Save Settings** and **Update Running Server**.

   > **Note**
   >
   > You can also configure RADIUS from your Access Server console using the command-line interface. Refer to [Tutorial: Manage the RADIUS Authentication Method from the Command-line Interface](https://openvpn.net/as-docs/tutorials/tutorial--radius-command-line.md).

## Step 3: Set RADIUS as the Access Server authentication method

You can set RADIUS as the default authentication method or as the method for users or groups.

When you set it as the default authentication method, all users authenticate via RADIUS unless their group or user authentication method overrides it. When you set it as the group authentication method, all users in the group authenticate via RADIUS unless their user authentication method overrides it. When you set it as the user authentication method, the user authenticates via RADIUS.

### Option 1: Set RADIUS as the default authentication method

1. Sign in to the Admin Web UI.
2. Click **Authentication \> Settings**.
3. Select **RADIUS** for **Default Authentication System**.
4. Select **Save Settings** and **Update Running Server**.

### Option 2: Set RADIUS as a group's authentication method

1. Sign in to the Admin Web UI.
2. Click **User Management \> Group Permissions**.
3. Click **More Settings** for the appropriate group.
4. Select **RADIUS** for the **Auth method**.
5. Select **Save Settings** and **Update Running Server**.

### Option 3: Set RADIUS as a user's authentication method

1. Sign in to the Admin Web UI.
2. Click **User Management \> User Permissions**.
3. Click **More Settings** for the appropriate user.
4. Select **RADIUS** for the **Auth method**.
5. Select **Save Settings** and **Update Running Server**.

### RADIUS is now in use

You can now authenticate with RADIUS using the JumpCloud usernames and passwords.

> **Tip**
>
> You can view details about the last authentication attempt in JumpCloud by clicking on the RADIUS server. The details are displayed under **Network Device Details**.

## Troubleshooting

If you encounter issues with users connecting, this may be due to one or more reasons:

- Misconfiguration.
- User isn't a member of the group with JumpCloud RADIUS access.
- Network problems.
- Incorrect credentials.

One or more of the steps below may resolve the issue:

1. Ensure the user's password works by signing into the JumpCloud user portal.

   > **Important**
   >
   > The portal uses the email address, while RADIUS expects the username.
2. Ensure you entered the Access Server public IP address as the IP address for the JumpCloud RADIUS server configuration.
3. Ensure the shared secret matches on both JumpCloud and Access Server.
4. Ensure users are members of the User Group granted access to RADIUS.
5. Ensure users are in an active state on JumpCloud.
6. Ensure port 1812/UDP is open.
7. Reach out to our [support](https://support.openvpn.com/), and we can help.

---

Prev: [RADIUS Integration](https://openvpn.net/as-docs/tutorials/radius.md)
Next: [Tutorial: Configure Active Directory (Windows Server) RADIUS Protocol for Access Server](https://openvpn.net/as-docs/tutorials/tutorial--microsoft-ad-radius.md)
Index: https://openvpn.net/as-docs/llms.txt