eduroam and govroam for Colleges, Schools and Public Bodies

We design, install and support the RADIUS authentication behind eduroam and govroam, so your students, staff and visitors connect securely on your campus and at every other participating site in the UK and worldwide.
Get a QuoteWireless Networks

What is eduroam?

eduroam (education roaming) is the secure wireless roaming service used by universities, colleges and research organisations in over 100 countries. A learner or member of staff signs in once with their home organisation's username and password, and their device then connects automatically at any participating site, from another college's library to a university abroad.

govroam is the equivalent service for the UK public sector. Councils, NHS bodies, emergency services and other public organisations use it so their staff can work securely from each other's buildings.

Both services are run in the UK by Jisc. Joining them means connecting your own wireless network and user directory to the national RADIUS hierarchy. That connection, and keeping it secure and reliable, is the part EssingtonITS delivers.

Talk to an engineer
Students connecting laptops to campus wifi through eduroam

How we deliver eduroam and govroam

GL Server unit providing eduroam

On-site RADIUS appliance

A hardened FreeRADIUS server installed in your network, pre-configured for eduroam and govroam. It authenticates your own users against Active Directory, Microsoft Entra ID, LDAP or Shibboleth, and forwards visiting users to the national servers. Delivered on our GL Server platform or on your existing virtual infrastructure.
Wireless network installation for a college campus

Hosted RADIUS service

No server to look after. We run the RADIUS service for you in UK data centres, monitored around the clock and patched as part of the service. A good fit for smaller colleges, multi-academy trusts and organisations without a dedicated network team.
Shibboleth identity management single sign-on for education

Onboarding and federation

We handle the technical side of joining: registering your organisation and realm, configuring the connection to the UK national RADIUS proxies, testing from other sites, and setting up the onboarding tool so learners can configure their own phones and laptops safely.

What is included

WPA2 and WPA3 Enterprise security
Every user authenticates with their own credentials over 802.1X and EAP, with server certificates that devices can verify. No shared passwords written on whiteboards.
Works with your wireless kit
We integrate with Aruba, Cisco Meraki, Ubiquiti UniFi, Ruckus and other controllers, and with the VLAN and guest policies you already have.
Your directory, your accounts
Authentication against Active Directory, Entra ID, Google Workspace, LDAP or an existing Shibboleth identity provider, so leavers lose access the day they leave.
Self-service device onboarding
Learners and staff set up Windows, macOS, iOS, Android and Chromebook devices themselves with a configuration tool, cutting helpdesk calls at the start of term.
Monitoring and logging
Authentication logs retained for the periods the services require, alerts if the national proxies become unreachable, and reporting on who is roaming where.
UK-based support
Engineers who have run eduroam for colleges and public bodies, with support contracts that cover upgrades, certificate renewals and changes to the national service.

Who it is for

Further education colleges and sixth forms joining eduroam for the first time or replacing an ageing RADIUS server. Multi-academy trusts that want one secure wireless identity across every school. Councils, NHS trusts and other public bodies moving to govroam. Universities and research organisations that need a second opinion on an existing deployment. If you were an IntelliRoam customer, this is the same team and the same service, now delivered under the EssingtonITS name.
Get a QuoteShibboleth Identity Management
Search