On this page you will find technical details on eduroam. Note that the use of IdP and SP is in the context of RADIUS and not SAML. |
The following parameters must be exchanged with Skolfederation for eduroam connected organizations:
Administrative parameters
The shared secred is provided by Skolfederation to the technical contact in agreement. If certificate is used the exchange is performed correspondingly.
Servers:
For RADIUS, use port 1812 (UDP)
For RADSEC, use port 2083 (TCP)
Ny nyckel för RADSEC-server att använda från och med hösten 2021
Before the test connection may be put in production an acceptance test must be performed. How the acceptance test is performed depends on if the organization is connecting as eduroam SP and/or IdP.
To connect an eduroam SP the connecting organization configures their RADIUS servers with Skolfederation parameters.
The connecting organization is responsible for filtering any harmful attributes in RADIUS responses, such as VLAN- and role allocation.
After configuration a temporary test account is obtained. When Skolfederation and the connecting organization have confirmed successful authentication, and that the network function fulfills the eduroam Policy Service Definition, the systems may be put into production.
To connect an eduroam IdP the connecting organization configures their RADIUS servers to respond to calls from Skolfederation. Connected IdP must fulfill the requirements set in SWAMID eduroam Technology Profile v1.0.
After configuration connecting organization should perform a test of the function. This is performed easiest by testing the connection at another connected eduroam SP.