Home » Identity and Access Management: CAF » eduroam


eduroam (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. eduroam is available in more than 100 countries and 17,000 locations worldwide.

eduroam allows students, researchers and staff from participating institutions to obtain Internet connectivity across campus and when visiting other participating institutions by simply using their mobile device.1

The Canadian Access Federation (CAF), managed and operated by CANARIE, is a member of the eduroam global Wi-Fi federation. CAF currently supports more than 10 million eduroam logins per month.

Where Can I Roam in Canada?

If your institution is a member of CAF that has deployed eduroam, you can roam at the Canadian institutions listed here:

What are the Benefits of eduroam?

For students, research, and staff of educational and research institutions, eduroam provides seamless connectivity on a trusted wireless network at hundreds of participating sites around the world. If you can access your home institution’s network, you can access the eduroam network!

For IT organizations of educational and research institutions, eduroam minimizes the operational impact of managing visiting users of your network. eduroam eliminates the need for creating temporary user accounts and relies on visitors’ home institution’s IT organization if technical support is required.

How Does eduroam Work?

When a user tries to log on to the wireless network of a visited eduroam-enabled institution, the user’s log-on request is sent to the user’s home institution. This is accomplished via a hierarchical system of authentication servers. The user’s home institution verifies the user’s credentials and sends the result to the visited institution. If the sign-on is successful, the user is granted access to the wireless network. Learn more about eduroam.


Connecting to eduroam

To connect your institution to eduroam, your institution must first join the Canadian Access Federation (CAF).

Configuring eduroam

  • Configure your 802.11 wireless infrastructure to enable the “eduroam” SSID with WPA2/AES encryption and 802.1X authentication (typically using PEAP or EAP-TTLS)
  • Integrate with your identity management infrastructure
  • Create a public support web page, and
  • RADIUS proxy your .ca domain between your institution and the eduroam operator


All eduroam documentation is available at www.eduroam.org.

Help and Support

Users wishing to connect to eduroam must acquire support from their home institution only. Institutions hosting eduroam connectivity are not required to provide support to visiting guest users. If you are an IT administrator at a participating institution, please contact CANARIE Network Operations.

Acceptable Use

eduroam users are expected to abide by any restrictions or policies applied by their home institution or organization, as well as those of institutions or organizations visited.


Related Documents

eduroam Compliance Statement

eduroam Fact Sheet: GÉANT

Case Study: User Authentication in the Fast Lane: eduroam as your primary campus SSID

Case Study: The City of Mississauga Leverages eduroam to Build a City-Wide “Virtual Campus”