About service

The service relies on a hierarchical RADIUS server system to ensure that identity verification requests are routed correctly. This hierarchy consists of:

Institutional RADIUS servers: responsible for verifying local user data.

National-level servers of the Egyptian Universities Network (FLRS): connecting all institutions within Egypt.

Top-level servers (TLRS): connecting national consortia globally.

Authentication

The service is based on two fundamental principles:

Authentication: always performed by the user’s original institution using their personal credentials.

Authorization: performed by the host entity to grant the user access to the internet.

An email address format, such as user@university.edu.eg, is used to route the request through the global hierarchy until it reaches the original university’s server. Technical and Security Standards

The service employs several technologies to ensure data security:

Using the IEEE 802.1X standard and the EAP protocol to establish a secure tunnel between the user’s device and the authentication server.
Data encryption: Ensuring end-to-end encryption of credentials, so that no intermediary party, including eduroam’s infrastructure operators, can access the password.

Supporting protocols such as WPA2 Enterprise to ensure the highest levels of security for Wi-Fi networks.

Roles and Responsibilities

Participating parties are categorized as follows:

Identity Provider (IdP): The institution/university to which the user belongs, responsible for managing their accounts and ensuring the security of their data.
Service Provider (SP): The entity/organization hosting the visitor and providing them with internet access.
Roaming Operator (RO): The national entity managing the service nationwide, which is the Egyptian Universities Network – the Supreme Council of Universities in Egypt.