> For the complete documentation index, see [llms.txt](https://docs.radiusaas.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.radiusaas.com/scepman-integration.md).

# SCEPman Integration

RADIUSaaS integrates with [SCEPman](https://docs.scepman.com/?_gl=1*89r1op*_ga*MTQyOTEzMDY4MS4xNzgzNDA2ODA1*_ga_BRDGXLVK3H*czE3ODM0MDY4MDQkbzEkZzAkdDE3ODM0MDY4MDQkajYwJGwwJGgw) to deliver end-to-end certificate-based network authentication. While SCEPman automates certificate issuance and lifecycle management, RADIUSaaS validates certificates and controls access to Wi‑Fi, VPN, and wired networks. Customers can choose between a self-managed Enterprise Bundle and a fully managed SaaS Bundle based on their deployment and operational needs.

**The following bundle options are available:**

## **RADIUSaaS + SCEPman Enterprise Bundle**

The RADIUSaaS + SCEPman Enterprise Bundle combines the full Enterprise Editions of RADIUSaaS and SCEPman into one integrated solution for certificate-based network access. The bundle includes all enterprise features, product support, and advanced authentication capabilities required for productive environments. It is designed for organizations that want to secure Wi-Fi, VPN, and wired network access using certificates without relying on traditional passwords.

**We recommend the Enterprise Bundle for:**

* Productive environments
* Enterprise-grade network security
* Certificate-based Wi-Fi, VPN, and LAN authentication
* Scalability and high availability
* Organizations requiring support and enterprise features

## **RADIUSaaS + SCEPman SaaS Bundle**

The RADIUSaaS + SCEPman SaaS Bundle provides a fully managed cloud-based solution for certificate issuance and network authentication. By combining RADIUSaaS and SCEPman in a SaaS offering, organizations can deploy secure network access without managing their own PKI or RADIUS infrastructure. The solution integrates with Microsoft Intune and Microsoft Entra ID to enable modern, passwordless network authentication.

**We recommend the SaaS Bundle for:**

* Organizations looking for a fully managed service
* Simplified deployment and operations
* Cloud-first environments
* Certificate-based Wi-Fi and VPN authentication
* Reduced infrastructure and maintenance effort

For both options the [SCEPman Connection](https://docs.radiusaas.com/admin-portal/settings/settings-server#scepman-connection) feature enables automatic issuance and renewal of RADIUSaaS server certificates through SCEPman.

## **RADIUSaaS + SCEPman Bundle Edition Comparison**

<table data-search="false"><thead><tr><th width="241">Capability</th><th width="241" align="center">RADIUSaaS + SCEPman Enterprise Bundle</th><th align="center">RADIUSaaS + SCEPman SaaS Bundle</th></tr></thead><tbody><tr><td><strong>Hosting</strong></td><td align="center">Customer's Azure Tenant</td><td align="center">Vendor's Datacenters</td></tr><tr><td><strong>Infrastructure Cost</strong></td><td align="center">Customer</td><td align="center">Vendor</td></tr><tr><td><strong>Maintenance</strong></td><td align="center">Customer / Azure</td><td align="center">Vendor</td></tr><tr><td><strong>Configuration</strong></td><td align="center">Customer</td><td align="center">Customer</td></tr><tr><td><strong>Geo-Redundancy</strong></td><td align="center">Yes</td><td align="center">Planned</td></tr><tr><td><strong>Certificate Master RBAC</strong></td><td align="center">Yes</td><td align="center">No</td></tr><tr><td><strong>AD Enrollment</strong></td><td align="center">Yes</td><td align="center">Planned</td></tr><tr><td><strong>Enrollment REST API</strong></td><td align="center">Yes</td><td align="center">Planned</td></tr><tr><td><strong>Logging</strong></td><td align="center">Azure Monitor / <br>Log Analytics</td><td align="center">WebConsole</td></tr><tr><td><strong>CA hierarchy</strong></td><td align="center">Yes</td><td align="center">Bring your own Key Vault (BYOK)</td></tr><tr><td><strong>Machine certificates</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>User certificates</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>AD Device Certificates</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>Certificate Management</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>Kerberos Certificates</strong></td><td align="center">Yes</td><td align="center">Planned</td></tr><tr><td><strong>Other MDM Integration</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>Device Compliance Check</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>Support</strong></td><td align="center">Yes</td><td align="center">Yes</td></tr><tr><td><strong>Licensing</strong></td><td align="center"> Subscription-fee</td><td align="center"> Subscription-fee</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.radiusaas.com/scepman-integration.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
