WPA Enterprise WPA2/WPA3-Enterprise
"Corporate Wi-Fi" — every user logs in with username/password or cert instead of a shared PSK. Built on 802.1X + RADIUS + EAP.
Flow: client → AP → RADIUS server → EAP method exchange → success/fail. EAP methods: PEAP (Microsoft, password), EAP-TTLS (cert + password), EAP-TLS (mutual cert, most secure), EAP-FAST (Cisco). Benefits over Personal: per-user revocation, RADIUS accounting for audit, dynamic VLAN assignments. Eduroam uses this globally so students get Wi-Fi at any university.