Previously if doing RADIUS authentication I'd have used EAP-MSCHAPv2, but MSCHAPv2 isn't secure anymore. Are there any options for secure RADIUS authentication other than going down the EAP-TLS route?

The more interaction I have with customers who are getting started with Identity projects, the more I realize that a simple explanation and comparison of the differences between EAP types is needed.

At work we currently support PEAP-TLS and EAP-TLS for wireless authentication, thus any system that needs access to our wireless network requires a user/device certificate. Recently however we have ...