====== eduroam 2024 ======

==== concept ====
[[http://www.eduroam.org/|eduroam]] offers world-wide roaming access for members of educational and research institutions. A member of such institution can obtain network access at any other member institution using his/her/their eduroam ID. This is implemented through a network of Service Points (which control the WiFi access) and Identity Providers (which identify and authorize the users). Typically, an eduroam member institution is both Service Point and Identity Provider simultaneously - this is also the case for HITS.

==== access ====

The WiFi SSID for using the eduroam authentication is called "eduroam". To get access:

  * For members of other eduroam member institutions visiting HITS:
    * if you have set up eduroam on your mobile device before, it should just work
    * if your institution has set up an automated installer, you can find it at https://cat.eduroam.org by searching for your institution's name
    * you can search the website of your institution for instructions describing how to access eduroam

  * For HITSters:
    * you can perform a manual installation based on the following operating system dependent instructions:
      * [[eduroam2024_windows10_11|Windows 10/11]]
      * [[eduroam2024_macos_sonoma|MacOS Sonoma/Sequoia]]
      * [[eduroam2024_ios_tablet|Apple iOS Tablet/Smartphone]]
      * [[eduroam2024_Android|Google Android Tablet/Smartphone]]
      * [[eduroam2024_linux|Ubuntu Linux]]


If none of the above instructions help you or in case of problems, please contact the ITS group.

==== known problems ====

As HITS has a domain name (h-its.org) which is not part of the normal German domain hierarchy (.de), the other eduroam member institutions have to implement the so-called [[https://wiki.terena.org/display/H2eduroam/DNS-NAPTR|Dynamic Discovery]] in order to properly route the authentication requests for HITSters - this is known to work in most European institutions. If Dynamic Discovery is not implemented at the visited institution, it is not possible to reach the HITS authentication server, the authentication requests will remain unanswered, and therefore the access to the eduroam network will be rejected. Unfortunately, this is a decision made at the visited institution and there is nothing that can be done about it elsewhere.