Staff WiFi

Passwordless zero-trust access, automated.

Your customers are still managing shared WiFi passwords and manually offboarding leavers. Staff WiFi fixes all of that with the Purple app, without new hardware.

Speak to an expert

80%

fewer IT tickets

99.999%

RADIUS uptime

500m

logins/year, 90+ countries

Ask about your WiFi usage in plain English

How it works

One identity. One pass. Every device, every site.

Authenticate

Generate a WiFi pass

Get online

Stay connected

Auto-revocation

What your customers get

The Purple app as the engine

Staff authenticate once with their existing SSO credentials and get a unique, unshareable certificate-based profile in the app.

WPA3-Enterprise, 802.1X

Certificate-based authentication. No passwords to share, rotate, or forget.

Automated JML

When a user leaves the IdP, they lose network access automatically. No manual intervention.

Identity-based VLANs

Each user gets the right access for their role, automatically, on any device.

Works with Entra ID, Google & Okta

Any cloud RADIUS vendor supported. Listed vendors auto-sync.

MDM & UEM integrations

Zero-touch enrolment through the MDM your customers already run

Purple issues the certificate, your customer's MDM delivers it. 802.1X profiles and EAP-TLS certificates push over SCEP or PKCS to managed devices, so staff join the network without typing anything. Deployments complete in under 30 minutes, with no new hardware to quote.

Microsoft Intune

Windows, macOS, iOS, Android

Your customers deploy certificate-based WiFi profiles over SCEP or PKCS from the Intune console they already use. Compliance state feeds Conditional Access, so a device that fails a rule is refused at authentication.

SCEP & PKCSConditional AccessCompliance-gated join

Jamf Pro

macOS, iOS, iPadOS

Distribute 802.1X profiles and certificates to your customers' Apple hardware through Jamf's SCEP proxy. Devices arrive on the network already trusted - no user prompt, no shared password.

Automated Device EnrolmentSCEP proxyInstant revocation

JumpCloud

macOS, Windows, Linux

JumpCloud manages the device and its posture while Purple runs the RADIUS layer. One directory identity governs both the endpoint and its network access, so your customer manages both in one place.

Cloud directory syncDevice posture checksCross-platform

Customer running Kandji, Hexnode, Workspace ONE, or another UEM? Any platform that can deliver a SCEP or PKCS payload enrols devices the same way.

Map a customer's MDM rollout

Microsoft and Intune are trademarks of the Microsoft group of companies. Jamf and Jamf Pro are trademarks of JAMF Software, LLC. JumpCloud is a trademark of JumpCloud Inc. All are used with permission; this page is not endorsed by or affiliated with them.

Where to sell it

Built for identity-first workplaces.

Corporate offices

Every employee, contractor, and visitor gets the right access from day one, revoked automatically the moment they leave.

Hospitals & care settings

Clinical and non-clinical staff each get role-based access, with directory sync doing the compliance work.

Schools & universities

Staff and faculty sign in with existing SSO credentials, no shared passwords floating around a large, high-turnover site.

Retail & hospitality chains

Housekeeping, F&B, and front desk each get the right access from day one across every location.

Who your buyer is.

IT & network managers

The primary contact. They own the shared-password problem, fear an audit, and are looking for a solution that doesn't create more work.

CISOs & security leads

Zero trust and identity-based access are already on their agenda. Staff WiFi gives them a quick, demonstrable win on network security posture.

HR & operations

Feel the JML pain directly. Every leaver is a manual process and a potential security risk, Staff WiFi removes it entirely.

Ready to add Purple to your portfolio?

Join 80,000+ venues already running on Purple. No targets, no minimums, just bigger deals.

Become a partner Speak to an expert