Home » Identity and Access Management: CAF » Frequently Asked Questions

Frequently Asked Questions

 

+ How do I join the Canadian Access Federation?
Please see full details on participation criteria and procedures on the “Join the Canadian Access Federation” page.
+ My organization is a CAF Participant.  How do we add an additional service (such as Federated Identity Management (FIM), eduroam or eduGAIN?
Please contact caf@canarie.ca. You will be required to submit an updated Trust Assertion Document, and you may also be required to execute a Participation Agreement amendment.
+ Our organization’s technical representative has changed. How do we update our technical contact details?
A request must be sent to tickets@canarie.ca by either the technical contact already on file, or your organizations’ CIO.
+ How do I change our organization’s realm for eduroam?
Send your request to tickets@canarie.ca. Please note that CAF allows for only one realm per institution at this time. However, we are able to accommodate two realms during a short transition period.
+ How do we change our organization’s IdP / SP entity ID?
Send your new metadata to tickets@canarie.ca.
+ Is there a test environment in which we can test our metadata before going live?
CAF has a test federation for CAF participants’ use. If your organization is not a CAF participant, please visit the “Join the Canadian Access Federation” page. CAF does not have a test IdP to provide test credentials. Service Providers are encouraged to get an IdP from one of their CAF participant users.
+ How do we join eduGAIN?
If your organization is a CAF participant, submit your request to tickets@canarie.ca.  Otherwise, please visit the “Join the Canadian Access Federation” page.
+ How do I enrol my IdP in the eduroam Configuration Assistant Tool (CAT)?
If you have a Shibboleth IdP registered in CAF, you will be able to access CAT using your institution’s credentials. Please submit your request to tickets@canarie.ca. An invitation to manage your IdP in CAT will be sent to the technical contact on file. Please note that the link provided in the invitation is only valid for 24 hours. If you do not have a Shibboleth IdP in CAF, you will be required to use social network credentials such as @gmail, LinkedIn, Twitter or Facebook to login. Please submit your request to tickets@canarie.ca. An invitation to manage your IdP in CAT will be sent to the technical contact on file. Please note that the link provided in the invitation is only valid for 24 hours.
+ I need guidance for configuring FIM at my organization
Please visit: https://tts.canarie.ca/otrs/public.pl?Action=PublicFAQExplorer;CategoryID=2
+ I need guidance for configuring eduroam at my organization.
Please visit: CAF – eduroam Deployment Guide
+ I have a technical question that is not addressed here.
Please see the list of technical FAQs maintained on CANARIE’s ticketing system. For any other technical questions, please contact tickets@canarie.ca.
+ I have a non-technical question about CAF.
Please contact caf@canarie.ca.