Govroam

The Roaming solution for the public sector

User Tools

Site Tools

You are here: start » jisc » govroam_cat_documentation_for_organisational_administrators
jisc:govroam_cat_documentation_for_organisational_administrators

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
jisc:govroam_cat_documentation_for_organisational_administrators [2018/07/02 15:25] – [Sign-Up] adminjisc:govroam_cat_documentation_for_organisational_administrators [2024/12/13 13:43] (current) – ↷ Links adapted because of a move operation 166.108.192.94
Line 1: Line 1:
 [[https://wiki.govroam.uk/doku.php?id=jisc:govroam_cat_documentation_for_organisational_administrators&do=export_pdf&orientation=portait|Export as PDF]] [[https://wiki.govroam.uk/doku.php?id=jisc:govroam_cat_documentation_for_organisational_administrators&do=export_pdf&orientation=portait|Export as PDF]]
 +
 +======The Govroam CAT is now deprecated.======
  
 =====Govroam CAT Signup===== =====Govroam CAT Signup=====
Line 14: Line 16:
  
 On receipt of the token the recipient would click a link which takes them to the Login page. On receipt of the token the recipient would click a link which takes them to the Login page.
-This Login page gives a number of options for Identity Providers (these are not the same Identity Provides as referred to above, but login systems for Google, LinkedIn, Twitter and a number of Universites).  +This Login page gives a number of options for Identity Providers (these are not the same Identity Provides as referred to above) but currently the only option is Google.  
-The administrator will need to pick one of these and log in. At this point the ID provided by the Login system, e.g. Google, will be permanently associated with the CAT. This means that in future the administrator will have to use the same Login system each time to gain access to the CAT. However, it is possible to change Login system1.+ 
 +The administrator will need to log in. At this point the ID provided by the Login system, e.g. Google, will be permanently associated with the CAT. This means that in future the administrator will have to use the same Login system each time to gain access to the CAT. 
 Once logged in the administrator will have access to their CAT Identity Provider and be able to start the process of populating the appropriate values and creating a new Profile. Once logged in the administrator will have access to their CAT Identity Provider and be able to start the process of populating the appropriate values and creating a new Profile.
 ====Summary==== ====Summary====
Line 21: Line 24:
   - On receipt of the email from Jisc the technical contact should click on the link (within 24 hours).   - On receipt of the email from Jisc the technical contact should click on the link (within 24 hours).
   - Pick an IdP to use for now and in the future (e.g. Google).   - Pick an IdP to use for now and in the future (e.g. Google).
-  - Log in with your Google credentials.+  - Log in with your Google credentials (creating a new account if necessary).
   - Create a new CAT IdP for your site.   - Create a new CAT IdP for your site.
  
Line 65: Line 68:
  
 ====Step 2: How to log into Govroam CAT?==== ====Step 2: How to log into Govroam CAT?====
-When clicking on the Administration interface link, you will be automatically sent to the Govroam Support Services' federated login service. This login service does not work with site-specific usernames and passwords; instead you are presented with a list of sources of identity. Choose any organisation that you have an account with: +When clicking on the Administration interface link, you will be automatically sent to the Govroam Support Services' federated login service. This login service does not work with site-specific usernames and passwords; instead you are presented with a list of sources of identity, currently just Google.
- +
-  * Social Networks: You can log in using the federated login function of several popular social networks, including, but not limited to, Google and Facebook. +
-  * UK Access Federation: many universities across Europe have already joined the educational Global Authorisation INfrastructure - if your organisation is among them, click on that organisation and authenticate with your home organisation's usual web login credentials. +
  
-Some users have noted that none of the above options suits them: e.g. their organisation is not participating in eduGAIN, and they have an aversion against using social networks. We understand that if a user finds all the numerous authentication options unacceptable, then he will have a hard time logging in. It might be worth considering creating a social network account just for the purpose of logging in here; even if the service portfolio offered by e.g. Google is not interesting for the user, their authentication service in itself is useful on its own. Alternatively, under the 'UK Access Federation' tab you can search for 'UnitedID'. https://unitedid.org/ provides free, secure accounts. This is a sort of 'home for the homeless' if the above options aren't suitable. 
  
-Whichever IdP you use to sign in is the one you need to keep using. Swapping to using another (say if you've got both Google and Facebook accounts) won't work as the CAT will be tied to the identity provided by the IdP you initially used. If you want to swap to using another IdP then send yourself an invite to manage your Organisation and then sign in with the new IdP. You can either keep the other account as an administrator or delete it. 
 =====Configuring my organisation's properties===== =====Configuring my organisation's properties=====
 ====Overview==== ====Overview====
Line 154: Line 151:
 **Note 2 - CA requirements** **Note 2 - CA requirements**
  
-Various client device operating systems have specific requirements about which CA certificates and server certificates they accept. For more information, please see [[EAP Server Certificate]] considerations.+Various client device operating systems have specific requirements about which CA certificates and server certificates they accept. For more information, please see [[public:eap_server_certificate]] considerations.
  
 **Note 3 - CA rollover support** **Note 3 - CA rollover support**
jisc/govroam_cat_documentation_for_organisational_administrators.1530545115.txt.gz · Last modified: by admin