Arrival & Registration Room: NgREN Secretariat Participant check-in, credential verification, and participant introductions.

Welcome & Opening Remarks

• Joshua Atah (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat Opening address by the Programme Coordinator outlining workshop goals and expectations.

Introduction to Identity Federation (NgRENID) and eduroam.

• Abdulkarim Giwa Suleiman (Nigerian Research and Education Network)

Room: NgREN Secretariat An introduction to NgRENID and eduroam, covering the fundamentals of identity federation, secure federated access, global connectivity through eduGAIN, and the benefits for Nigerian research and education institutions.

System architecture primer: Shibboleth IdP and OpenLDAP.

• Chinedu Otuya (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat This session provides an overview of the core components of an identity federation infrastructure, focusing on the roles of Shibboleth Identity Provider (IdP) and OpenLDAP. Participants will learn how these technologies work together to authenticate users, manage identity information, and enable secure, federated access to services within the NgRENID ecosystem.

Lab 1: Deploying & Structuring OpenLDAP

• Femi Ogundele (Nigerian Research and Education Network (NgREN))
• Oluwatobi Fowora (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat Deployment: Installing OpenLDAP on institutional server instances, creating DNS records, and installing SSL certificates.

Lab 2: Shibboleth IdP Installation & LDAP Binding

• Femi Ogundele (Nigerian Research and Education Network (NgREN))
• Oluwatobi Fowora (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat Core Environment: Installing Java and Jetty web server; downloading Shibboleth IdP software. Security: Generating institutional cryptographic keys and SSL/TLS certificates. Attribute Release: Configuring the IdP to safely release attributes. Directory Integration: Pointing ldap.properties securely to LDAP and mapping attributes via attribute-resolver.xml.

Day 1 Wrap-up & Metadata Exchange

• Femi Ogundele (Nigerian Research and Education Network (NgREN))
• Oluwatobi Fowora (NgREN)

Room: NgREN Secretariat Customizing the institutional IdP interface. Generating institutional IdP metadata XML. Submitting metadata to the NgRENID Staging Environment Registry.

Arrival an Signing in Room: NgREN Secretariat

Day 1 Recap Room: NgREN Secretariat Review of key takeaways, troubleshooting outstanding IdP issues, and day two agenda review.

Lab 3: Deploying FreeRADIUS for Institutional Authentication

• Femi Ogundele (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat Architecture Deep Dive: Understanding hierarchical RADIUS proxying (Local → National → Regional/Global). Installation: Setting up FreeRADIUS. LDAP Auth: Configuring FreeRADIUS to authenticate local users directly against the LDAP directory built on Day 1.

Lab 4: Upstream Proxying & eduroam Integration

• Femi Ogundele (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat Registration: Creating institutional accounts on the eduroam Switchboard platform. Proxy Routing: Configuring proxy.conf and clients.conf to seamlessly route unknown/visiting user realms to the NgREN National Top-Level RADIUS (TLR) servers.

Lab 5: Wireless Controller (WLC) Config & Testing

• Femi Ogundele (Nigerian Research and Education Network (NgREN))

Room: NgREN Secretariat SSID Provisioning: Configuring mock Wireless LAN Controllers (WLC) or Access Points (AP) to broadcast eduroam via WPA2/WPA3 Enterprise Testing & Debugging: Using tools like radclient and the eduroam Configuration Assistant Tool (CAT) to test and debug user logins.

Open Clinic: Troubleshooting & Production Onboarding

• Femi Ogundele

Room: NgREN Secretariat

Closing Remarks Room: NgREN Secretariat