Apply for Visited Boarding of Govroam


Please complete this form as fully as possible. Mandatory fields are marked with a *.

Contact the team at govroam@jisc.ac.uk for assistance, if required.

Your Details

We need your details so that we can contact you if there are any problems with the form. You'll also receive a copy on submission.

*
This field is required.
* For sending a copy of the submitted form and general enquiries
This field is required.

Organisation Details

*
This field is required.
*
This field is required.

Individual authorising application

Please include the details of the person in your organisation - usually a director, CTO or equivalent - who approves this application and is ultimately responsible for the terms and conditions being followed.

*
This field is required.
*
This field is required.
*
This field is required.

In order to complete this govroam registration your organisation has to agree to our visited-only terms. Contact the govroam team if you have not yet received this document for signature

Detail of RADIUS server(s)
* Must resolve to an internet IP address (i.e. not RFC1918) * * *
This field is required.
Not a valid choice
This field is required.
Add another...

Note:
  • Please ensure host names are fully qualified domain. Names (FQDN) that resolves to internet accessible IPs i.e. not RFC1918 (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).
  • IP addresses must be unique to a particular RADIUS server. i.e. 1-to-1 NAT is fine but 1-to-many isn't.
  • IP addresses should have a reverse DNS entry that resolves to the hostname specified.
  • See the tech spec for details on what functionality the service should provide.
Your RADIUS solution

Which will your RADIUS solution have configured and enabled?

Most RADIUS servers are able to set this extra attribute which helps remote sites identify the source of requests for audit purposes.
Chargeable User Identity can be set to a unique hash which helps remote sites report problem users without knowing their identity.

Load balancing

If your servers form a cluster then please indicate this below. Clustered servers need a single shared secret. Cisco ISE and Aruba Clearpass support clustering but MS NPS, FreeRADIUS and RADIATOR don't. There will still be seperate shared secret(s) for each of the Jisc NRPS.

*
Not a valid choice
Realm name
*
This field is required.

The realm is required as a unique identifier to identify your site in configuration, logs, audit trails and documentation.

Format: @somewhere.tld e.g. @holby.nhs.uk, @camford.ac.uk, @weatherfield.gov.uk

System administrator contact
* This is required for secure communication during initial set up, such as the exchange of the shared secret(s) using an encrypted file. This email address MUST be hosted with the same realm as that being registered for govroam. If a Federation, this contact should be the lead responsible for configuring the RFO RADIUS server(s) for govroam.
This field is required.
* A number to which the password for the encrypted file can be texted.
This field is required.

Useful technical documentation: tech spec, code of practice and high-level design.

Support contact

Can be a person or a helpdesk but must be capable of handling govroam queries.

*
This field is required.
To be signed up on the govroam technical mailing list.
* e.g. 09:00-17:00 Mon-Fri
This field is required.
For helpdesk, knowledge base or online support.
Technical contact

The person to whom queries from Jisc or other sites will be directed. There needs to be at least one named contact, as opposed to a group or service address. More can be added below.

*
This field is required.
* To be signed up on the govroam technical mailing list.
This field is required.
*
This field is required.
* e.g. 09:00-17:00 Mon-Fri
This field is required.
Mapping contact

The person who is responsible for updating the mapping application

*
This field is required.
*
This field is required.
*
This field is required.
* e.g. 09:00-17:00 Mon-Fri
This field is required.
Additional Contacts
Add another...
Next steps

Once this form has been submitted, we'll respond with sample configuration, shared secrets, and a test account from Jisc's IdP for outgoing authentication tests.

Privacy Notice

The govroam service does not gather any personal information from end users, but various processes behind the scenes require us to be able to contact the administrators in subscribing organisations.

Their information is needed for us to set up your organisation's govroam subscription and to access the service. We'll use it, as described in our standard privacy notice, to provide the service you've requested, as well as to identify problems or ways to make the service better.

The contact information for the person or team providing B2B govroam technical support specifically will also be shared with the govroam administrators community when they access the govroam wiki, for the purpose of issue resolution between subscribing organisations. We'll keep the information until we are told that you no longer wish to subscribe, at which point it will be removed from both the service and wiki systems.

Please contact us at govroam@jisc.ac.uk to update this information