Welcome to Warden
Your network's new best friend for authentication. Whether you're managing a handful of switches or a sprawling enterprise network, Warden has you covered with authentication services that just work.
Identity Providers
Where your users live
Connect Warden to your existing user directories. We support pretty much everything - from on-prem Active Directory to cloud providers.
Users & Groups
Control who gets access
Manage your network users and organize them into groups. Groups make it easy to apply consistent policies across teams or departments.
Network Devices
Your switches, APs, and firewalls
Register the devices that will authenticate through Warden. Each device gets its own configuration with RADIUS secrets and policies.
Security
Keep things locked down
Two-factor authentication, certificates, and audit logging. Everything you need to stay secure and compliant.
Policies
Define the rules
Policies tie everything together - they define which identity providers to use, what 2FA methods to require, and what RADIUS attributes to return.
NAC Tracer
Debug authentication flows
When things don't work, NAC Tracer shows you exactly what happened - step by step. No more guessing why authentication failed.
Key Concepts
Understanding these core concepts will help you get the most out of Warden.
Identity Providers
These are your user databases - Active Directory, LDAP, Google Workspace, etc. Warden doesn't store passwords; it verifies them against your identity providers.
Policies
Policies define how authentication works. They specify which identity providers to check, what 2FA to require, and what RADIUS attributes to return on success.
Hosts
Hosts are your network devices - switches, access points, VPN concentrators. Each host points to Warden for authentication and has its own RADIUS secret and policy.
Host Groups
Group similar hosts together to apply common settings. Instead of configuring 100 access points individually, put them in a group and configure once.
User Groups
Organize users by department, role, or access level. Groups are used in policies to control who can access what - and to assign different VLAN or attributes.
Two-Factor Authentication
Add an extra layer of security. Warden supports TOTP apps (Google Authenticator), push notifications, and can chain to external MFA providers like Duo.
Using MFA with Push Notifications?
If you're using Duo, Azure MFA, or other push-based two-factor authentication, make sure to read our RADIUS timeout guide. Default timeouts are almost always too short for push notifications to work reliably.
Need a Hand?
Can't find what you're looking for? We're here to help. Reach out to NocTel support at support@noctel.com or visit www.noctel.com for additional resources.
When contacting support, having a NAC Tracer export ready will help us troubleshoot much faster!