Architecture for Federated Hotspot Authentication Without RADIUS
Hello,
I am researching authentication architectures for a federated hotspot platform built on MikroTik.
The idea is that multiple independent hotspot operators participate in a shared identity network.
Users would have accounts such as:
fed243344
fed998877
while operators would continue to have their own local users.
My question is:
Does RouterOS provide any mechanism to identify a subset of usernames and route authentication differently before local hotspot authentication occurs?
For example:
- Username prefix matching
- External authentication hooks
- Identity routing
- Authentication delegation
- Custom login handlers
Example:
Local users:
ahmed
saleh
user123
Federated users:
fed243344
fed998877
If a user enters fed243344, is there any native RouterOS method to recognize that this account belongs to an external federation and forward authentication accordingly?
I am intentionally exploring alternatives to traditional RADIUS-based architectures.
I am interested in understanding what RouterOS can natively support for this type of federated authentication model.
Thank you.