IronWiFi Cloud RADIUS and Wi-Fi Authentication Platform

FedRAMP package ID

FR2631154499

Cloud service provider

IronWiFi, LLC

Certification status

Initial Implementation

Impact level

Not listed

Certification class

Not listed

Authorization path

Program

Certification type

20x

Marketplace phase

Initial Implementation

Deployment model

Public Cloud

Register snapshot

September 28, 2026

Service model

SaaS

Status date

August 12, 2026

Business categories

Cybersecurity & Risk Management, Network Management

SAM.gov UEI

TB1XW4HNNUG9

Milestones on record

1

The marketplace carries IronWiFi Cloud RADIUS and Wi-Fi Authentication Platform under package FR2631154499 with 15 recorded fields. Its current status was set on August 12, 2026. No independent assessor is named on the record. No agency authorizations are listed against it in the current feed. It is delivered as SaaS on a public cloud, filed under 2 business categories including Cybersecurity & Risk Management and Network Management. Its SAM.gov unique entity identifier is TB1XW4HNNUG9.

• Platform Overview

  The administrative console for the offering: tenants, networks, users, certificates, reports and role-based access.

• Cloud RADIUS

  Multi-region RADIUS and RadSec authenticating users and devices with EAP-TLS, PEAP/MSCHAPv2, EAP-TTLS and MAC-based methods against Entra ID (commercial and GCC High Graph sync), Google Workspace, Okta and LDAP/Active Directory; per-network policy, VLAN and attribute assignment.

• Captive Portal

  Branded captive portals with self-registration, vouchers, sponsored guest access, social and enterprise identity sign-in, terms acceptance and session control.

• WPA-Enterprise

  802.1X WPA-Enterprise authentication using the Cloud RADIUS service, including certificate-based EAP-TLS.

• Cloud PKI

  Built-in certificate authority issuing and renewing device and user certificates for EAP-TLS.

• Enrollment Portal

  End-user and device enrollment into the tenant certificate authority.

• Device Portal

  Self-service device certificate and identity management for end users.

• SCEP

  SCEP enrollment of device certificates through mobile device management.

• IoT Authentication

  Certificate or MAC-based authentication for IoT and non-user devices.

• Passpoint

  Passpoint / Hotspot 2.0 profiles so managed devices join participating networks automatically.

• OpenRoaming RADIUS

  OpenRoaming federation RADIUS so managed devices authenticate on participating networks.

• WiFi Calling

  Wi-Fi calling authentication offload through the Cloud RADIUS service.

• Network Intelligence

  Authentication and session analytics in the administrative console.

• AI Center

  Operator-facing analytics and assistance in the administrative console; does not change the authentication boundary.

• Webhooks & API

  REST API and webhooks for automating tenants, networks, users, certificates and reports.

• Conditional Access

  Per-network policy that decides whether a user or device is admitted and which VLAN or attributes apply.

• Identity Provisioning

  Directory and SCIM provisioning of users into the offering.

• WiFi ITDR

  Detection of credential misuse, rogue and anomalous devices and abnormal access patterns, with alerts to the console, API and webhooks.

• Terraform

  Terraform provider for automating tenant, network and policy configuration through the REST API.

• Roaming Analytics

  Analytics for OpenRoaming and Passpoint federation sessions.

• Cisco Cloud Control with AgenticOps

  Cisco Systems, Inc.

  Initial Implementation, no impact level listed, Program path, 20x.

• AI Security, Governance, & Telemetry Platform

  Portal26, Inc.

  Initial Implementation, no impact level listed, Program path, 20x.

• TRM Labs on GovCloud

  TRM Labs, Inc.

  Initial Implementation, no impact level listed, Program path, 20x.

• ComplianceAide Government Cloud

  ComplianceAid INC.

  Initial Implementation, no impact level listed, Program path, 20x.

• Dispel Zero Trust Engine

  Dispel LLC

  Initial Implementation, no impact level listed, Program path, 20x.

**IronWiFi is the vendor-neutral authentication layer for agency Wi-Fi and wired networks: cloud RADIUS, 802.1X with EAP-TLS, cloud PKI with SCEP enrollment, captive portals, and Wi-Fi identity threat detection (ITDR), delivered as SaaS on Google Cloud with US regions available.** **Keep the network you have.** IronWiFi works with any access point, switch or controller that speaks RADIUS and 802.1X, so an agency adds certificate-based authentication and policy without replacing hardware or running RADIUS and NPS servers on premises. **Use the identities you already manage.** Users and devices authenticate against Microsoft Entra ID (commercial and GCC High), Google Workspace, Okta, and LDAP or Active Directory. Device certificates are issued and renewed by the built-in cloud PKI over SCEP, including for MDM-managed fleets. **See who and what is on the network.** Every authentication is logged per user and device; the ITDR service flags credential misuse, rogue devices and anomalous access on Wi-Fi and reports through the console, API and webhooks. **Guest, visitor and roaming access** through branded captive portals, vouchers, sponsored access and OpenRoaming, on the same platform. **Assurance on record.** SOC 2 Type II (Johanson Group LLP, report issued 7 May 2026) held in the IronWiFi Trust Center. FIPS 199 impact categorization Moderate (this is not a FedRAMP Moderate Authorization). IronWiFi-prepared 20x Class A package documents were published 13 September 2026 and the 20x Class A Certification application (FRC-APP-AFC) was submitted to FedRAMP the same day; FedRAMP's decision is pending. Marketplace status is Not yet certified and Certification Class is Unknown until FedRAMP records it. IronWiFi is in the Initial Implementation Phase and is not FedRAMP Certified today. **Agency use cases:** direct use as the authentication, policy and monitoring layer inside an agency information system; indirect use as a third-party information resource inside integrator and managed-service offerings delivered to agencies. Documentation, a REST API and a self-service console let an agency pilot the service on its existing network.