Keytos Shield EZCA EZRADIUS EZSSH EZCMS EZMonitor

The cloud RADIUS solution Microsoft customers expect

Customers in the Microsoft ecosystem deserve a cloud RADIUS that integrates natively with the Microsoft services they already use and trust

Integrates with

Entra ID Intune AD CS Cloud PKI Sentinel Meraki Unifi Cisco Fortinet
  • Real-time Entra ID auth and Intune compliance, no sync jobs, no bolt-ons
  • Connects to your existing PKI and certificates, nothing to rip out or rebuild
  • From $1 / active identity - Pay only for who connects
Start free trial Pricing Book a demo

1,200+

Global organizations
trust Keytos

45M+

RADIUS authentications
per month by EZRADIUS

12+

RADIUS regions to choose from for low latency

99.95%

Enterprise-tier service availability

4.8/5

G2 Users Love Us badge G2 High Performer, Fall 2026 badge

"No server deployment needed for wireless authentication with Entra credentials. Straightforward setup, and the organization eliminated its on-premises RADIUS server entirely by moving to a fully cloud-based infrastructure."

Renzo Patricio C. · Senior System Administrator

Why Microsoft-first teams choose EZRADIUS

Built by ex-Microsoft engineers, EZRADIUS feels like a natural extension of the Microsoft security and identity stack

  • Fully hosted in the cloud - no servers to run or patch

  • Real-time Entra ID auth and group checks via Microsoft Graph

  • Checks Intune device compliance at the moment of authentication

  • Exports accounting and audit logs to Sentinel or any SIEM

  • Built by ex-Microsoft engineers for a consistent, Microsoft-native experience

  • On the Microsoft Marketplace - billable through Azure, MACC-eligible

Other RADIUS Solutions

  • You host, patch, and maintain the RADIUS servers yourself

  • Relies on directory syncs - delayed group data and ghost accounts

  • Can't tell managed, compliant devices from risky ones at login

  • Limited or no log retention for audits and investigations

  • Entra ID and Intune bolted on as afterthoughts - fragmented, inconsistent

  • Sold outside Microsoft channels - no Azure billing

Built for Microsoft. Works across your stack.

EZRADIUS brings native Microsoft integrations to every layer of your network authentication, without extra configuration or third-party glue.

Native Entra ID and Intune integration

Authenticate users against Entra ID in real time and enforce Intune device compliance at the moment of connection, with no sync delays or ghost accounts.

Works with your existing PKI

EZRADIUS integrates with AD CS, Microsoft Cloud PKI, and EZCA. No rip-and-replace required, keep the certificate strategy you already trust.

Full authentication + audit logging

Monitor and alert on authentication and admin events in real time by exporting RADIUS accounting and audit logs to Microsoft Sentinel or any SIEM solution.

Procure through Microsoft channels

EZRADIUS is on the Microsoft Marketplace and can be billed through Azure, counting toward your Microsoft Azure Consumption Commitment for eligible enterprise agreements.

A natural fit for Microsoft environments

EZRADIUS connects your network infrastructure to the Microsoft services you already depend on, from Entra ID and Intune to Microsoft Cloud PKI, AD CS, and Sentinel.

EZRADIUS network architecture diagram for Microsoft Entra ID, Intune, PKI, and Sentinel

Up and running in 4 Microsoft-friendly steps

No custom identity plumbing. Just connect the Microsoft services you already use.

01

Deploy from the Microsoft Marketplace

Create your EZRADIUS subscription directly from the Microsoft Marketplace, with usage billed straight to your Azure account.

02

Connect Entra ID and Intune

Click to connect your EZRADIUS instance to your directory and Intune for seamless identity and device-compliance integration.

03

Leverage your existing PKI

EZRADIUS connects directly to your existing AD CS, Microsoft Cloud PKI, or EZCA certificates with no changes to your infrastructure.

04

Add EZRADIUS as your RADIUS server

Point your network configuration to the EZRADIUS global set of IPs and begin authenticating your users and devices.

Watch a tutorial video Learn how it works

EZRADIUS in the Microsoft ecosystem

Simple, transparent pricing

No long-term contracts. No hidden fees. Cancel anytime.

Basic

Most popular ✦

A fully-featured cloud RADIUS server at an affordable price

  • Certificate authentication (EAP-TLS)
  • Entra ID authentication (EAP-TTLS)
  • Legacy authentication (PAP, PEAP, MS-CHAPv2, MAC Bypass)
  • Real-time Entra ID group checks
  • Real-time Intune compliance checks
  • RADIUS + RadSec endpoints
  • Bring your own CA/PKI
  • SIEM audit log export
  • Local RADIUS proxy
  • Entra ID commercial, GCC, & GCC high
  • Multi-region with zonal/geo redundancy
  • 99.9% availability SLA
  • Support within 1 business day

Monthly subscription cost

$0 USD
(pay only for active identities)

Monthly cost per active identity

First 500$1 USD each
Next 500$0.40 USD each
Next 9,000$0.20 USD each
Anything above$0.10 USD each
Get started

Dedicated

All the convenience of hosted RADIUS with your own dedicated infrastructure

  • Everything in Basic, plus:
  • First 200 active identities included
  • Full dynamic IP address RADIUS support
  • Dedicated infrastructure for only your users and devices
  • Choose a single region closest to you
  • 24/7 support within 24 hours

Monthly subscription cost

$400 USD
(includes 200 active identities)

Monthly cost per active identity

First 200Included in subscription
Next 300$1 USD each
Next 500$0.40 USD each
Next 9,000$0.20 USD each
Anything above$0.10 USD each
Book a demo

Enterprise

Custom, multi-region deployments with the highest SLAs and support

  • Everything in Dedicated, plus:
  • First 10,000 active identities included
  • Multi-region with zonal/geo redundancy
  • Custom hosting options
  • Up to 99.95% SLA
  • 24/7 support within 1 hour

Monthly subscription cost

$3,500 USD
(includes 10,000 active identities)

Monthly cost per active identity

First 10,000Included in subscription
Anything above$0.10 USD each
Book a demo
See full pricing details & calculator

Ready to add cloud RADIUS to your Microsoft environment?

Start a free trial today, or talk with our team about the fastest way to plug EZRADIUS into Entra ID, Intune, Microsoft Cloud PKI, AD CS, and Microsoft Sentinel.

Start free trial Book a demo

Frequently asked questions

Yes. EZRADIUS integrates with Microsoft Graph to authenticate users against Entra ID and evaluate group membership in real time, without relying on sync jobs or ghost accounts.

Yes. EZRADIUS can evaluate Intune device compliance during authentication so only managed and compliant devices get access to your network.

Yes. EZRADIUS works with Microsoft Cloud PKI, Active Directory Certificate Services, EZCA, and other third-party certificate authorities so you can keep your existing certificate strategy.

Yes. EZRADIUS has out-of-the-box support for Entra ID username and password authentication through EAP-TTLS for certificate-free and BYOD scenarios.

Yes. EZRADIUS can export RADIUS accounting and audit logs so Microsoft security teams can analyze network access events in Microsoft Sentinel and other SIEM platforms.

Yes. EZRADIUS is available through the Microsoft Marketplace and Microsoft Security Store, giving Microsoft customers flexible procurement options.

Yes. For eligible enterprise agreement customers, EZRADIUS can be billed through Azure and help count toward Microsoft Azure Consumption Commitment when purchased through Microsoft channels.

EZRADIUS was built by ex-Microsoft engineers for Microsoft-first organizations. It plugs into the tools your team already trusts, including Entra ID, Intune, Microsoft Cloud PKI, AD CS, and Microsoft Sentinel.