Office WiFi where every employee signs in as themselves

Identity-based staff WiFi synced to your directory, a private key for every meeting room screen and sensor, a separate network for visitors and contractors, and one policy across every office. Run on the access points you already own.

• Microsoft Entra ID, Okta and Google Workspace sign-in
• No shared passwords
• xPSK for meeting rooms and IoT
• 99.9% RADIUS uptime SLA

A typical office today

• One staff WiFi password, sent in a welcome email and never rotated
• Leavers and former contractors who can still connect weeks after they have gone
• Room displays, printers and cameras on the same network as employee laptops
• No good answer when an auditor asks who was on the network last Tuesday

With Purple

• Every employee signs in with their own Entra ID, Okta or Google Workspace account
• Access ends the moment an account is disabled in your directory, synced over SCIM
• Every device gets its own key and VLAN, kept apart from people
• Every session is logged against a named person, device, time and location

Joiners, movers and leavers, handled by your directory

Employees connect with the account they already use for everything else. Purple syncs with Microsoft Entra ID, Okta, Google Workspace and JumpCloud over SCIM, group membership decides VLAN and policy, and Entra ID Conditional Access is honoured on every join.

• Leavers are revoked the moment their account is disabled, with no password to change
• Finance, engineering and executive groups land on their own VLANs with their own rules
• Corporate laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
• Personal phones are onboarded in about 60 seconds with the Purple app

Purple issues, renews and revokes the certificates itself, so there is no certificate authority and no on-premise RADIUS server to stand up.

A private key for everything in the meeting room

Meeting room displays and AV kit, printers, door controllers, cameras and building sensors cannot sign in with a username. xPSK gives each one its own key and its own VLAN, so a leaked key exposes one device, not the whole floor.

• Revoke a single key without re-keying every device in the building
• MAC binding ties each key to the first device that uses it
• Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
• No per-device licence and no cap on devices per key

Visitors online in reception, nowhere near your corporate network

Clients, interview candidates, auditors and suppliers expect WiFi from the moment they sit down in reception. Contractors need more than that, for weeks at a time. Purple gives each their own network, kept entirely separate from staff and device traffic.

• Branded captive portal with UK GDPR consent and a full audit trail
• Time-limited contractor keys that expire on their own, with no MDM enrolment
• DNS content filtering with Purple Shield, on guest and staff networks
• Sign-in data sent to your CRM through 400+ data connectors

Walk into any office and you are already online

Employees who move between headquarters, regional offices and project sites should not have to find a new network at each one. A WiFi Pass, issued once, connects them automatically over Passpoint at every site in your estate, encrypted from association and with no captive portal.

• Profiles are bound to identity, so they survive iOS 18 MAC address rotation
• One policy and one dashboard across offices with different access point vendors
• Cloud RADIUS regions in the UK, EU and US
• OpenRoaming via Passpoint reaches more than 5 million hotspots worldwide

Fewer WiFi tickets, and an answer for every auditor

The business case is the one your security team already wants: helpdesk tickets down, leaver risk closed automatically, and every connection tied to a named identity when the auditors arrive.

Figures from Purple platform data and service terms.

Free brochure

Take this page into your next budget meeting

Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.

See your office estate on one network platform

Tell us about your offices and your directory, and we will show you how staff, device, visitor and contractor access would work on your hardware.

• Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
• Single sign-on with Microsoft Entra ID, Okta and Google Workspace
• ISO 27001 certified, Cyber Essentials Plus, GDPR and CCPA compliant