We are a small company and we use Ubiquiti Unifi gear for that; for now including the supplied RADIUS server. We do have a domain, but for something that public as Wifi and VPN passwords we went with separate credentials.