The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hi,

> Why is it only for "small user populations"?

We only allow manual user management: add users by entering them
one-by-one or do a CSV import.

We intentionally do not allow connecting to an AD, or SAML. That is
because we don't want to become everybody's RADIUS, ending up with
millions of accounts to shepherd; if you are large enough to have your
own user management, then you should also be knowledgable enough to run
your own RADIUS server.(*)

We can of course reconsider that, but at some point when we host really
large organisations, this cannot be a free service any more. There is
actual infrastructure in the backend of this, and it needs to scale.

Greetings,

Stefan Winter

(*) Fun fact: did you know that issuing EAP-TLS certificates based on
SAML identities is patent-protected in the U.S.?

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature