An open discussion list for topics related to the geteduroam service

[Ralf Paffrath <paffrath AT dfn.de>]

Hi Paul,

thank you for your explanation. Great work!

I agree  the pseudo-account creation has a lot of potential.  

So I’m very, very interested in the federated authentication method.

How can I test it?

 The organisation discovery from the App, using federated 
authentication to get a pseudo-accounts for eduroam via the App

How can I do this? 

Greeting,

Ralf

On 11 Nov 2020, at 11:57, Paul Dekkers (via geteduroam Mailing List) <geteduroam AT lists.geant.org> wrote:

Hi list!

There were not that many posts to this mailing list (this is the first
;-)), but quite a number of subscribers already. This mail is to share
some updates about geteduroam.

As you may have noticed by the updates in the Apple App Store and Google
Play Store, Jørn and I worked very hard to meet a deadline for Android
API compatibility. This resulted in the 1.0.16 release that we are quite
happy with!

This version of the geteduroam App for iOS/iPadOS and Android has no
known bugs as of yet, and like the Windows App works with:
- The organisation discovery from the App, to download a profile from CAT
- The organisation discovery from the App, using federated
authentication to get a pseudo-accounts for eduroam via the App
- Loading an .eap-config from the filesystem, like manually downloaded
from eduroam CAT or the hosted IdP

We are still working on macOS: for the pseudo-accounts we have a working
.mobileconfig download as intermediate solution. For ChromeOS we are
unsure whether we can properly configure the devices: the last resort
solution would be to present .onc-profile downloads.

There is a lot in the Apps, allowing the user to explicitly accept Terms
and Conditions, get support options, present logo’s… Quite some time was
spent on getting the Apps to support Passpoint (Hotspot 2.0) roaming
networks next to SSID configuration, and it will do so by default (as
configured in CAT) if the EAP-types are compatible on the platform.

The pseudo-account creation has a lot of potential. We’re doing the
first trials in the Netherlands and have institutions that are using the
Azure AD cloud based IdP to create these eduroam credentials, and also
have an organisation that is already geteduroam-only for their eduroam
accounts. (They are small ;-))

We will provide more information on how to provide this workflow
yourselves in due course, all of this work is available on GitHub
already. But we’ll also offer a (demo) service that an NRO and IdP can
opt-in to. This is the easiest way to get familiar with this workflow.
More on that later; but if you are interested in an early trial or demo
account on one of the existing platforms, please contact us.

For completeness, most resources can be found via https://www.geteduroam.app

Jørn and Paul

P.S. Let us know what you prefer to see on this list: we can use it for
periodic updates, indicate every new release (or possibly the ones that
you can test from TestFlight?). It’s a new list, new community, …

--
Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1, D - 10178 Berlin
Tel.: 030 884299-0 (DFN-GS Berlin: Sekretariat)
Fax: 030 88 42 99 370
http://www.dfn.de

Vorstand: Prof. Dr. Hans-Joachim Bungartz (Vorsitzender), Dr. Rainer Bockholt, Christian Zens
Geschäftsführung: Dr. Christian Grimm, Jochem Pattloch

Attachment: smime.p7s
Description: S/MIME cryptographic signature