...
- The national servers send RADIUS authentication requests to each IdP periodically to check whether the IdP is alive. As long as the IdP responds (accept or reject), then the national servers know the IdP is alive. This “account_that_its_ok_to_reject” account is used in that request.
Should I authenticate users in my own domain before sending them to eduroam US?
- Yes. eduroam US will reject requests send to it from the same domain the server is registered with.
Can my users have users exist in a realm other than the one that I have registered with eduroam?
- Yes. We check that all users match your realm name or a sub domain of your realm name.