The service relies on a hierarchical RADIUS server system to ensure that identity verification requests are routed correctly. This hierarchy consists of:<\/p>\n
Institutional RADIUS servers: responsible for verifying local user data.<\/p>\n
National-level servers of the Egyptian Universities Network (FLRS): connecting all institutions within Egypt.<\/p>\n
Top-level servers (TLRS): connecting national consortia globally.<\/p>\n
Authentication<\/p>\n
The service is based on two fundamental principles:<\/p>\n
Authentication: always performed by the user’s original institution using their personal credentials.<\/p>\n
Authorization: performed by the host entity to grant the user access to the internet.<\/p>\n
An email address format, such as user@university.edu.eg, is used to route the request through the global hierarchy until it reaches the original university’s server. Technical and Security Standards<\/p>\n
The service employs several technologies to ensure data security:<\/p>\n
Using the IEEE 802.1X standard and the EAP protocol to establish a secure tunnel between the user’s device and the authentication server.
\nData encryption: Ensuring end-to-end encryption of credentials, so that no intermediary party, including eduroam’s infrastructure operators, can access the password.<\/p>\n
Supporting protocols such as WPA2 Enterprise to ensure the highest levels of security for Wi-Fi networks.<\/p>\n
Roles and Responsibilities<\/p>\n
Participating parties are categorized as follows:<\/p>\n
Identity Provider (IdP): The institution\/university to which the user belongs, responsible for managing their accounts and ensuring the security of their data.
\nService Provider (SP): The entity\/organization hosting the visitor and providing them with internet access.
\nRoaming Operator (RO): The national entity managing the service nationwide, which is the Egyptian Universities Network \u2013 the Supreme Council of Universities in Egypt.<\/p>\n","protected":false},"excerpt":{"rendered":"
The service relies on a hierarchical RADIUS server system to ensure that identity verification requests are routed correctly. This hierarchy consists of: Institutional RADIUS servers: responsible for verifying local user […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-98","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/pages\/98","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/comments?post=98"}],"version-history":[{"count":0,"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/pages\/98\/revisions"}],"wp:attachment":[{"href":"https:\/\/eduroam.eg\/en\/wp-json\/wp\/v2\/media?parent=98"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}