SmartZone controllerssupport a range ofexternal authentication servicesfor bothproxy (via controller)andnon-proxy (direct-to-AAA)authentication mechanisms. According to theRUCKUS One Online Help – Authentication Services Configuration, the supported external services include:
Active Directory (AD) (A):Used for domain-based user authentication and group policy enforcement.
Lightweight Directory Access Protocol (LDAP) (B):Provides user authentication through directory lookup, commonly used for enterprise identity systems.
RADIUS (E):A widely used AAA protocol that integrates with external servers such as FreeRADIUS, Cisco ISE, or Microsoft NPS for centralized authentication and accounting.
WhileSAMLandOAuthare used inRUCKUS Cloud and RUCKUS Onefor SSO (Single Sign-On) and API authentication, they arenot used for WLAN or AAA authenticationwithin SmartZone.TACACS+is not supported as an external client authentication method in SmartZone (it is only used for admin login on some platforms).
Therefore, the correct authentication services areA (AD),B (LDAP), andE (RADIUS).
[References:, RUCKUS One Online Help – WLAN Authentication and AAA Integration, RUCKUS Analytics 3.5 User Guide – Authentication Logs and Proxy Mode Analysis, RUCKUS AI Documentation – SmartZone AAA and External Authentication Architecture, ]
Submit