What is eduroam?

The following promotional video from AARNET, the Australian NREN, provides an introduction to the eduroam service while further details are provided below:

eduroam (Educational Roaming) is an implementation of an infrastructure which facilitates roaming educational users to gain Internet access at other member sites by authenticating against a server hosted at their own institution. Network access at member sites is via 802.1X.

Authentication is via a hierarchical network of Radius servers. A number of NREN's maintain national Radius proxy servers (known as Federation Level Radius servers, or FLR's) which relay authentication requests to and from their local member institutions' Radius servers. These FLR's, in turn, relay requests via the European top-level Radius servers. Further information is available from the sites listed in the Links page.

HEAnet, Ireland's National Education and Research Network, maintains the FLR's for Ireland.

Each eduroam member site may act as a Service Provider or an Identity Provider, or ideally both:

  • A Service Provider (SP) provides a wireless LAN service to visiting eduroam users. The visiting users are authenticated against their home authentication (or IdP) server via the eduroam infrastructure.
  • An Identity Provider (IdP) provides an authentication service for their own users as they avail of the wireless LAN service at other eduroam sites.

It is hoped that all eduroam member sites will choose to act as both a SP and a IdP as this will further extend the reach of eduroam, to the benefit of the entire academic and research community.