Home » Identity and Access Management: CAF » eduroam

eduroam

eduroam (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. eduroam is available in more than 70 countries and 17,000 locations worldwide.


eduroam allows students, researchers and staff from participating institutions to obtain Internet connectivity across campus and when visiting other participating institutions by simply using their mobile device.1

The Canadian Access Federation (CAF), managed and operated by CANARIE, is a member the eduroam global Wi-Fi federation. CAF currently supports more than 10 million eduroam logins per month.

Where Can I Roam in Canada?

If your institution is a member of CAF that has deployed eduroam, you can roam at the Canadian institutions listed here:


View eduroam Canada in a larger map

What are the Benefits of eduroam?

For students, research, and staff of educational and research institutions, eduroam provides seamless connectivity on a trusted wireless network at hundreds of participating sites around the world. If you can access your home institution’s network, you can access the eduroam network!

For IT organizations of educational and research institutions, eduroam minimizes the operational impact of managing visiting users of your network. eduroam eliminates the need for creating temporary user accounts and relies on visitors’ home institution’s IT organization if technical support is required.

How Does eduroam Work?

When a user tries to log on to the wireless network of a visited eduroam-enabled institution, the user’s log-on request is sent to the user’s home institution. This is accomplished via a hierarchical system of authentication servers. The user’s home institution verifies the user’s credentials and sends the result to the visited institution. If the sign-on is successful, the user is granted access to the wireless network. Learn more about eduroam.

 

Connecting to eduroam

To connect your institution to eduroam, your institution must first join the Canadian Access Federation (CAF).

Configuring eduroam

  • Configure your 802.11 wireless infrastructure to enable the “eduroam” SSID with WPA2/AES encryption and 802.1X authentication (typically using PEAP or EAP-TTLS)
  • Integrate with your identity management infrastructure
  • Create a public support web page, and
  • RADIUS proxy your .ca domain between your institution and the eduroam operator

Documentation

All eduroam documentation is available at www.eduroam.org.

Help and Support

Users wishing to connect to eduroam must acquire support from their home institution only. Institutions hosting eduroam connectivity are not required to provide support to visiting guest users. If you are an IT administrator at a participating institution, please contact CANARIE Network Operations.

Acceptable Use

Users of the eduroam network must abide by the Acceptable Use Policy of both CANARIE and the home/visiting institution. Please review the CANARIE Acceptable Use Policy.

Related Documents

eduroam Compliance Statement

Case Study: User Authentication in the Fast Lane: eduroam as your primary campus SSID