Tutorial: Configure JumpCloud with Access Server via RADIUS
Overview
You can configure Access Server to authenticate against JumpCloud via RADIUS. This document outlines the steps to set this up.
This setup expects you to have the following:
A JumpCloud account with admin access and an existing user directory.
Access Server installed with a public IP address.
Installed Access Server
JumpCloud directory
Start by creating the JumpCloud RADIUS server. JumpCloud hosts the server for you, so you don't need to set up any hardware.
Sign into the JumpCloud admin console.
Click RADIUS under User Authentication.
Click ( + ) to add a new RADIUS server.
Configure the RADIUS server:
On the Details tab:
Enter a friendly name for the server in Server Name.
Enter your Access Server's IP address in IP Address.
Copy the Shared Secret.
On the Authentication tab:
Select JUMPCLOUD from the Identity Provider dropdown.
Uncheck Require secure protocols and agree to the risks in the modal.
Select Password as the authentication method.
(Optional) Enable MFA.
On the User Groups tab:
Select the appropriate group(s) of users to grant access.
Click Save.
Now you can configure RADIUS with Access Server using your web-based Admin Web UI.
Sign in to the Admin Web UI.
Click Authentication > RADIUS.
Enable RADIUS authentication.
Enter the JumpCloud RADIUS server details in Hostname or IP Address.
Enter the shared secret from the JumpCloud RADIUS server in Shared Secret.
Set the Verify Message-Authenticator Attribute to No.
Select MS-CHAP v2 (recommended) as the RADIUS Authentication Method.
Select Save Settings and Update Running Server.
You can set RADIUS as the default authentication method or as the method for users or groups.
When you set it as the default authentication method, all users authenticate via RADIUS unless their group or user authentication method overrides it. When you set it as the group authentication method, all users in the group authenticate via RADIUS unless their user authentication method overrides it. When you set it as the user authentication method, the user authenticates via RADIUS.
Sign in to the Admin Web UI.
Click Authentication > Settings.
Select RADIUS for Default Authentication System.
Select Save Settings and Update Running Server.
Sign in to the Admin Web UI.
Click User Management > Group Permissions.
Click More Settings for the appropriate group.
Select RADIUS for the Auth method.
Select Save Settings and Update Running Server.
Sign in to the Admin Web UI.
Click User Management > User Permissions.
Click More Settings for the appropriate user.
Select RADIUS for the Auth method.
Select Save Settings and Update Running Server.
RADIUS is now in use
You can now authenticate with RADIUS using the JumpCloud usernames and passwords.
If you encounter issues with users connecting, this may be due to one or more reasons:
Misconfiguration.
User isn't a member of the group with JumpCloud RADIUS access.
Network problems.
Incorrect credentials.
One or more of the steps below may resolve the issue:
Ensure the user's password works by signing into the JumpCloud user portal.
Ensure you entered the Access Server public IP address as the IP address for the JumpCloud RADIUS server configuration.
Ensure the shared secret matches on both JumpCloud and Access Server.
Ensure users are members of the User Group granted access to RADIUS.
Ensure users are in an active state on JumpCloud.
Ensure port 1812/UDP is open.
Reach out to our support, and we can help.