Contacts
+06 4962 2000
eduroam (Education Roaming)
Eduroam is a service that enables users traveling to different institutions to connect to the wireless network easily and securely, using the same login credentials from their home organization.
FAQ
Support FAQs
User Support
Support for eduroam is provided by your home institution (e.g., your university). Therefore, you need to contact your organization's helpdesk for assistance in configuring your mobile devices (such as laptops or smartphones).
Forgotten Password
We're sorry you forgot your password. Eduroam credentials are managed by the same institution that generated your account (e.g., your university). Contact your home institution's helpdesk to have your password changed or reset.
I Need an eduroam Account
Eduroam credentials are issued by education and research institutions participating in the service. If your institution does not support eduroam, contact your organization's IT department to convince them to join eduroam! Here is the list of participating institutions: https://www.servizi.garr.it/eduroam/utenti/istituti-aderenti
Device Configuration Guide
You need to contact your home institution's helpdesk for assistance. Many organizations provide automatic eduroam configuration through eduroam CAT. Check if your institution is listed among those available.
Institutional Support
Institutions wishing to connect to eduroam and offer access to their staff, students, and researchers can apply by following this procedure. For any information requests, please write to this address: eduroam [at] garr.it.
SECURITY FAQs
Is eduroam Safe to Use?
eduroam is based on the most secure encryption and authentication standards currently in force.
Its security far exceeds that of typical commercial hotspots.
eduroam requires the use of 802.1x which provides end-to-end encryption to ensure that your private credentials are available only to your home institution (e.g., the university). What really matters is the certificate used by your home institution, regardless of who manages the infrastructure.
Please note, however, that when browsing the Internet by connecting from an eduroam hotspot, the local security measures of that hotspot will also apply to you. For example, firewall settings at the visited location may differ from those of your organization and, as a guest, you may have access to a reduced number of services.
Does eduroam Use a Web Portal for Authentication?
NO
Web portal-based authentication mechanisms (Web Portal, Captive Portal, or Splash-Screen) are not considered secure for eduroam, even if the website is protected by a secure HTTPS connection.
What Happens If a Web Page Requests My Username or Password?
eduroam will never display a web page requesting your username and/or password. This is a sign that someone is attempting to steal your password: do not use any network that asks you for this type of information; in fact, we encourage you to report it to us at this address: eduroam [at] garr.it.
I've Heard That, Under Certain Circumstances, My University Credentials Can Be Stolen by Attackers. What Is This About?
The security model in eduroam is the result of a well-researched study. Your credentials are well protected as long as your device is configured correctly; in this case, any type of authentication used in eduroam (PEAP, TTLS-PAP, EAP-TLS) will be secure.
Your eduroam Identity Provider (e.g., your university) provides you with installation instructions that allow for correct and secure configuration - the most critical part is configuring the device to trust a specific certificate authority (CA) and the Identity Provider's server name.
Many eduroam Identity Providers offer installers or configuration files that allow you to configure your device securely with a simple process in just a few clicks. One of these is eduroam CAT and the geteduroam app - check if your institution is among those listed.
Use the installers and/or configuration instructions provided by your eduroam Identity Provider to be safe from attacks.
If you don't follow the configuration instructions, or in the unlikely event that your eduroam Identity Provider doesn't provide them, the account data you use to access eduroam is at risk of a Man-in-the-Middle attack. For eduroam Identity Providers, not providing sufficient configuration instructions is contrary to the eduroam participation policy, which is why we welcome reports of such cases at this address: eduroam [at] garr.it.
We want to clarify that this type of problem is not specific to eduroam: any wireless network with Enterprise-type authentication, in fact, is in the same condition.
eduroam (education roaming) is a wireless access service developed for the international research and education community.
Who can access eduroam?
The service that allows users on the move to easily and securely access the wireless network
eduroam in a nutshell
eduroam (Education Roaming) is the service that allows users on the move to easily and securely access the wireless network at other organizations, using the same credentials provided by their home institution.
Students, professors, and researchers visiting an institution or organization that participates in eduroam can access the network from any mobile device and authenticate using the credentials they regularly use within their home organization.
How it works
Eduroam technology is based on the IEEE 802.1X standard and a hierarchy of RADIUS proxy servers, allowing any user from a participating institution to gain network access at any connected institution. Depending on the local policies of the visited institutions, eduroam participants may also have access to additional resources.
A Configuration Assistant Tool (CAT) has been developed to help organizations provide their users with access to eduroam. This tool, available for the most common platforms, allows you to configure your device quickly and easily.
Here you can find the configuration tool for institutions that have customized their eduroam profile. If it’s not available for your university or organization, you can consult the informational pages provided by your institution. Alternatively, you can contact your institution's Access Port Manager.
Is it secure?
eduroam is based on some of the most secure encryption and authentication standards currently available. Its security far exceeds that of typical commercial hotspots.
eduroam requires the use of the IEEE 802.1x standard, which provides end-to-end encryption to ensure that user credentials are only accessible by their home institution.
Moreover, user credentials are protected because eduroam does not share them with the site you are visiting; instead, they are forwarded to the user's home institution, where they can be verified and validated.
Unlike eduroam, authentication methods based on Web Portal, Captive Portal, and Splash Screens require you to trust their infrastructure when they receive your password in plain text, which would compromise the end-to-end encryption principles and security that eduroam offers.
eduroam will never display a web page asking for a username and/or password.
What are the benefits of eduroam for users?
The Wi-Fi roaming service eduroam is free for users, and once installed on your laptop, mobile phone, or other device, there’s no need to request temporary accounts or borrow someone else's credentials: simply turn on your device, and you should be online.
Where can I use eduroam?
Whether you are moving to campus or spending time studying or working at another research and educational institution, eduroam offers you seamless internet connectivity.
Over 10,000 hotspots are available at universities, research centers, academies, schools, and other research and educational institutions in more than 100 countries worldwide.
What about in Italy?
In Italy, eduroam is managed by the Italian eduroam Federation, coordinated by the GARR Consortium, which defines its usage rules and represents it in other federations and confederations.
What are the benefits of eduroam for institutions?
eduroam provides a single solution that meets all the mobility connectivity requirements of an institution, supporting both local users and visitors connecting to the local network, as well as users connecting to other participating networks.
Additionally, eduroam eliminates the need to provide temporary accounts, thus reducing administrative burdens, as students, staff, and researchers visiting another institution or country use the credentials provided by their home institution to access Wi-Fi services.
Identity e Resource Provider [IDP e RP]
- Identity Provider: Organizations that participate in the service by providing their users with the necessary credentials to access the network;
- Resource Provider: Organizations that participate in the service by providing the devices and network infrastructure that allow users to access the network.
Who and How
- Only institutions connected to the GARR network can join the Italian eduroam Federation as an Identity Provider (IDP) or as both Identity Provider (IDP) and Resource Provider (RP).
- Institutions, institutes, or organizations that ARE NOT connected to the GARR network can join the Italian eduroam Federation exclusively as a Resource Provider (RP).
Where and When
- If my institution is only an Identity Provider (IDP) of the eduroam federation, I will be able to connect to the Wi-Fi network of all national or international organizations that are Resource Providers (RP) of the eduroam Federation, but WILL NOT be able to do so within my own institution.
- If my institution is only a Resource Provider (RP) of the eduroam federation, all users from national and international organizations that are Identity Providers (IDP) of the eduroam federation, will be able to access the institution's Wi-Fi network.
- If my institution is both an Identity Provider (IDP) and a Resource Provider (RP) of the eduroam federation, I will be able to connect to the Wi-Fi network of my institution and all national or international organizations that are Resource Providers (RP) of the eduroam federation, and my institution will be able to grant access to all users from national and international organizations that are Identity Providers (IDP) of the eduroam federation.
Also check
- Check the map of Resource Providers (RP) and the locations where you can connect if your institution is an Identity Provider (IDP) of the eduroam federation.
- Check if your institution has joined eduroam and whether it is an IDP or RP (RP is also referred to as SP - Service Provider).
Administrative Procedures
- To join the Italian eduroam Federation as an Identity Provider (IDP) or Resource Provider (RP), or both, the same procedure outlined under "Joining Procedure" must be followed.
- Institutions, institutes, or organizations that ARE NOT connected to the GARR network can request to join only as a Resource Provider (RP).
All organizations connected to GARR can request to join the eduroam federation for free
Acceptable Use Policy (AUP) and obligations of the participants
eduroam Statistics
Wi-Fi Access and Roaming Connected Devices
eduroam: Wi-Fi roaming access via eduroam
The chart shows the number of successful authentications by Italian users roaming nationally and internationally.
eduroam: devices connected in roaming in Italy
The chart shows the percentage of devices connected in roaming in Italy.
