JumpCloud DAAS (Directory as a Service) offers a hosted RADIUS server feature. For security purposes, on top of the shared secret key which you’ll need to input into your RADIUS client for it to authenticate, JumpCloud also requires you to specify a static public IP address which the client will be connecting from.
In attempting to use a Ubiquiti UniFi access point as a RADIUS client, I’d mistakenly assumed that the controller would act as the RADIUS client and provided JumpCloud with the controllers public IP address. This is incorrect. With Ubiquiti Unifi it is the access point itself, not the UniFi cloud controller, that acts as the RADIUS client.
The lesson from all this is that Ubiquiti UniFi access points work just fine with JumpCloud’s RADIUS server offering, but, the sites where you want to use RADIUS authentication need to have static IP addresses.