Identity Provider (IdP) Policies

Identity Providers are required to restrict the issuance of eduroam credentials to eligible categories according to the institution’s regulations and the Egyptian Universities Network policies, with a clear definition of the start and end of eligibility, and immediate revocation of credentials upon termination of affiliation (e.g., graduation, resignation, transfer to another institution, etc.).

The service user or beneficiary must be clearly identified, with explicit specification of authorizations and available services.

Each user must be associated with a unique, traceable individual account. Shared or anonymous accounts are strictly prohibited.

Identity Providers are required to implement secure authentication mechanisms compliant with eduroam, based on EAP protocols, with support for mutual authentication and encryption. The use of digital certificates is preferred whenever possible.

Entities are required to protect the credential lifecycle, including password policies, temporary suspension after five (5) consecutive failed attempts, prohibition of storing confidential data, and prompting users to change passwords at least every 180 days.

Identity Providers are required to retain sufficient authentication and verification logs linking usage to specific users for a minimum period of six (6) months, provided this does not conflict with eduroam requirements.

Continuous updates to Intrusion Detection and Prevention Systems (IDS/IPS) and the utilization of technical solutions approved by Information Security and Incident Management (SIEM) administration are required.

Identity Providers are required to provide basic support to their affiliated users regarding device configuration and service usage.

Identity Providers are required to cooperate with the Egyptian Universities Network in cases of relevant complaints, incidents, and technical investigations.

The National Telecommunications Regulatory Authority (NTRA) shall be enabled to conduct inspections and audits of the university networks participating in the system to ensure compliance with all controls and stipulations in accordance with local policies and laws.