Frequently Asked Questions

Where can I find Federated Identity Management (FIM) communities support information?

There are a number of community forums with extensive technical expertise and experience with configuring federated software. If you have an application or configuration question and wish to discuss broad topics, we encourage you to search the archives before posting your question.

Shibboleth Consortium

Canada-centric discussion groups for FIM:

[email protected]

A Canada-focused technical discussion list suitable for broad discussions of technical topics; usually low traffic.

[email protected]

A Canada-focused support discussion list suitable for operational discussion topics and/or notifications; usually low traffic.

Technical contacts provided to CANARIE will be added to the above lists automatically as part of the communication and support environment.

We encourage technical contacts to join or monitor other community lists that are relevant to your chosen software platform. Notable open source community support lists are:

Shibboleth (FIM reference software implementation)


How do I join the Canadian Access Federation (CAF)?

Please see full details on participation criteria and procedures here: Join CAF

Our organization participates in the Canadian Access Federation (CAF). How do we add an additional service (such as Federated Identity Management (FIM), eduroam, or eduGAIN?

Please visit and navigate to the “Administrative Support” to select next steps (

Our organization’s technical representative has changed. How do we update our technical contact details?

Please visit our Administrative Support page for instructions.

How do we change our organization’s identity provider (IdP) / service provider (SP) entity ID?

Please send a request to [email protected] and include your new metadata.

Where can I find the Canadian Access Federation (CAF) identity provider (IdP) Installation Guide?

Please download this guide from our Documentation and Guides information above.

Is there a test environment in which we can test our metadata before going live?

Yes, CAF has a test federation for participants. Please send a request to [email protected] to access the test federation.

How do we join eduGAIN?

If your organization is a CAF participant as an identity provider (IdP), you are already enrolled in eduGAIN.

If your organization is a CAF participant as a service provider (SP), please send a request to [email protected] to enroll your service(s).

Otherwise, please visit the “Join the Canadian Access Federation” page.

I need guidance for configuring Federated Identity Management (FIM) at my organization.

Please send a request to [email protected].

I need guidance for configuring eduroam at my organization.

Please send a request to [email protected].

I have a non-technical question about CAF.

Please contact us at [email protected].