Access orchestration & MFA

Access at carrier scale.

Quedra Access delivers telecom-scale network access with identity-driven orchestration. It authenticates subscribers, users and devices, applies the right policy to each session, and asks for a second factor where the risk calls for it.

Session request · remote access VPNexample

Identity
s.aydin · Network operations
First factor
Directory password · verified
Context
New device · outside office hours
Policy
Admin access requires a second factor
AcceptChallengeReject

A push approval goes to the user's registered phone. On approval, the admin profile is applied to the session.

Core capabilities

Who you are decides what you reach.

AAA

Carrier-grade authentication

Authentication, authorization and accounting built for large subscriber bases across broadband, Wi-Fi and enterprise access.

  • RADIUS authentication and accounting
  • Session and quota management
  • Change of authorization in real time
MFA

Multifactor authentication

A second factor for VPN, Wi-Fi, network device and application logins, asked for only when the context calls for it.

  • Push approval and one-time passcodes
  • SMS and hardware token support
  • Context-based step-up rules
Orchestration

Identity-driven policy

Identities from many sources become one set of policies that the network enforces, session by session.

  • AD, LDAP, SQL and REST identity sources
  • Per-session service profiles
  • Network device administration control
How it works

Every session, from request to record.

  1. Identify

    Match the request to a subscriber, user or device record.

  2. Authenticate

    Verify credentials and ask for a second factor when context requires it.

  3. Authorize

    Apply the service profile, bandwidth and network segment for that identity.

  4. Account

    Record usage and session events for billing, audit and legal requirements.

Who it is for

From operator cores to enterprise VPNs.

The same engine serves a service provider's subscribers and an enterprise's administrators.

Internet service providers

Subscriber authentication, service plans and session accounting.

Mobile and Wi-Fi operators

Access for public Wi-Fi, offload and enterprise mobile services.

Enterprises

MFA for VPN and Wi-Fi, and control over who administers network devices.

Public sector

City-wide and campus networks with central identity and full audit trails.

Questions

Designed to stay up when everyone logs in at once.

How does it scale?

Horizontally. Add nodes as subscriber numbers grow.

What about availability?

Active-active clusters across sites, with no single point of failure.

Can it serve many tenants?

Yes. Each customer gets its own policies, identity sources and reporting.

How does it connect to our systems?

Standard protocols to the network, and REST APIs to billing, CRM and provisioning.

Plan your access architecture with us.

Share your subscriber numbers and network design, and our architects will propose a Quedra Access deployment.