Support
Customer story · Rail enterprise Wi-Fi
SJ Stockholmståg

Three portals, two countries,
delivered with Tele2.

SJ runs enterprise and guest Wi-Fi across Sweden and Norway on a single Netgraph platform. Three captive portals across three brands, one Service Gateway. Tele2 handles the edge and the IP-VPN transport. Netgraph runs the identity, policy and audit trail.

Customer SJ
Partner Tele2
Integration Central Service Gateway · Tele2 IP-VPN
Service Sign In
1.5k
Daily users
1,000–1,500 online across all portals
600Mbps
Average traffic
Aggregate across the three portals
75
Sites
Offices, depots, lounges, premises
3
Brands
SJ · SJ Norge · SJ Stockholmståg
The portals

Three portals.
Three brands, one platform.

The SJ enterprise portal is one captive page localized per country: Swedish language and the SJ wordmark in Sweden with a post-login redirect to sj.se, Norwegian language and the SJ Norge wordmark in Norway with a redirect to sj.no. SJ Lounges and SJ Stockholmståg each run their own portal in their own brand. Behind every login screen the same identity engine decides policy, the same admin watches the traffic, the same audit log records what happened.

SJ Enterprise guest Offices, depots, crew quarters
Built on Sign In

SJ

Enterprise portal, localized for Sweden.

The SJ enterprise portal reaches across SJ's office estate, train depots and the overnight quarters used by train crews on rotation. Employees, contractors and visitors sign in through one captive page — in Swedish, with the SJ wordmark, and a post-login redirect to sj.se for SJ-side resources.

  • Localized in Swedish with the SJ wordmark.
  • Post-login redirect to sj.se for SJ-side resources.
  • Coverage at offices, train depots and crew overnight quarters.
  • Identity-aware policy for employees, contractors and guests.
SJ Norge Cross-border Same portal, Norwegian profile
Built on Sign In

SJ Norge

Same portal, localized for Norway.

On the Norwegian network the same enterprise portal serves SJ Norge: same layout, Norwegian language, the SJ Norge wordmark, and a post-login redirect to sj.no for the Norwegian-side resources. One portal, localized at the edges, the same platform behind it.

  • Same enterprise portal template as Sweden.
  • Localized in Norwegian with the SJ Norge wordmark.
  • Post-login redirect to sj.no for Norwegian-side resources.
  • Single admin spans both countries.
SJ Premium space Stockholm · Malmö · Göteborg
Built on Sign In

SJ Lounges

Premium guest Wi-Fi in Stockholm, Malmö and Göteborg lounges.

At the SJ lounges in Stockholm, Malmö and Göteborg central stations, travellers expect a smooth, branded sign-in. The lounge portal is its own captive page, scoped to lounge guests only, with policy that fits a relaxed travel context rather than office security.

  • Lounge-specific portal, scoped to lounge SSIDs.
  • Quick guest onboarding for travellers.
  • Policy tuned for the lounge audience (not enterprise).
  • Three lounge venues: Stockholm, Malmö, Göteborg.
SJ Stockholmståg Commuter rail Internal BYOD, own brand
Built on Sign In

SJ Stockholmståg

Separate brand. Separate portal. Commuter-rail operations.

Stockholmståg runs Stockholm's pendeltrafik commuter trains under its own brand. Its Wi-Fi service is mostly internal BYOD for staff, plus consultants and temporary guests at the Stockholmståg depots and premises. The graphical profile is fully its own — distinct from SJ — but the policy engine and identity model are shared.

  • Own captive portal in Stockholmståg brand.
  • Primary use: internal BYOD for commuter-rail staff.
  • Also serves consultants and temporary guests.
  • Lives at the Stockholmståg depots and commuter-rail premises.
The delivery model

Tele2 at the edge.
Netgraph runs the policy.

SJ picks one network operator (Tele2), one platform (Netgraph) and one admin. Every portal at every site, across two countries, flows through the same central Service Gateway over Tele2's IP-VPN. Add a depot, add a lounge, add a country — the platform already runs.

01

Delivered with Tele2

Tele2 is SJ's network operator and the delivery partner for the whole stack. The Wi-Fi edge, the transport and the Service Gateway connectivity are all part of one operator relationship.

02

Central Service Gateway

Authentication and captive-portal traffic from every SJ site lands on a central Netgraph Service Gateway. Sign In, identity and policy are decided in one place, regardless of which portal the user landed on.

03

Routed over Tele2 IP-VPN

The path from the SJ sites to the Service Gateway runs over Tele2's IP-VPN, not the public internet. Stable, controlled transport that keeps the Wi-Fi service in the same operator-managed envelope as the rest of SJ's network.

Where the network reaches

Offices, depots, crew quarters, lounges.

The Wi-Fi service follows the rail operation wherever it physically lives, from corporate offices in Stockholm to overnight crew quarters along the network.

Delivered together

A rail Wi-Fi stack, one delivery

SJ

SJ

Customer · rail enterprise Wi-Fi

Sweden's national rail operator since 1856, with trains running across both Sweden and Norway. ~7,100 employees, 1,700 daily departures. Owns three captive portals (SJ enterprise, SJ Lounge, SJ Stockholmståg) across three brands (SJ, SJ Norge, SJ Stockholmståg) — all running on one platform.

sj.se ↗
Tele2

Tele2

Central Service Gateway · IP-VPN transport

Network operator and end-to-end delivery partner. Lands every site on a central Service Gateway and transports the traffic over Tele2's IP-VPN rather than the public internet. Predictable, supported, telemetry-rich.

tele2.se ↗
Netgraph

Netgraph

Sign In · captive portal & identity

Identity, policy and audit on a single cloud admin. Three portals, three brands, two countries, one operational model — the brand-per-portal split is config, not custom code.

Explore the platform →
Powered on Cisco infrastructure · Netgraph is a Cisco Solution Partner
See the platform behind SJ's network

Run your transport Wi-Fi like SJ does.

Three portals, three brands across two countries, one operator and one platform. Bring your real estate, your operator and your audiences. We'll show you the same model on your network.

Book a demoRead about Sign In