Note: Do you already know your role or want to make a change? Check our Community Organization Directory to see which services you’re subscribed to. Fill out this form to change roles for your organization.
Learn More About Your Roles
Here are the official roles related to InCommon Federation, the Certificate Service, and eduroam:
General Roles
InCommon Executive: The InCommon Executive represents the participant organization regarding all decisions and delegations of authority for the responsibilities of InCommon Participants, including but not limited to all relevant federation and certificate services.
This includes payment of invoices and assigning any person in the Site Administrator role (see below) for the InCommon Federation and as a Registration Authority Officer (RAO) for the InCommon Certificate Service. The InCommon Exec is authorized as such in the InCommon participation agreement or by succession from the originally named executive. The InCommon Exec will typically be filled by a CIO, VP of IT, or other senior administrative officer responsible for the organization’s information technology assets.
NOTE: We will need to schedule a short phone call with the new InCommon Executive to verify your organization’s official Site Administrators and RAO’s and to answer any questions. This verification is required per our Metadata Registration Practices Statement to help us maintain trust and security in all we do.
Federation Roles
Site Administrator: The Federation Site Administrator serves as the participating organization’s primary registrar. The administrator is responsible for registering and maintaining the policies and technical data related to the organization’s participation in the InCommon Federation, including submitting any Identity Provider and/or Service Provider metadata and associated certificates.
The administrator is assigned by the participating organization’s designated executive. Each InCommon participant can have up to two Federation Site Administrators.
Delegated Site Admin: This is a role created and managed by a Site Administrator to delegate the responsibility of metadata management for one or more Service Provider entities. A Delegated Site Admin manages metadata that, once submitted, will need to be approved by a regular Site Admin prior to review and approval by InCommon. Password resets and management of DSA’s is done by the organization’s Site Admins, not InCommon.
Certificate Services Roles
Primary Technical Administrator: The Certificate Service Primary Technical Administrators is named in your InCommon Certificate Service Subscriber Agreement. This Administrator has privileges to request and manage certificates for domains owned and controlled by their organization. Administrators can also create groups and additional Administrators.
If your Primary Technical Administrator needs to be changed after your Subscriber Agreement has been signed, please contact CertiNext Support to have this role updated. Please refer to our wiki for more information on additional technical roles to manage your environment.
eduroam roles
eduroam Administrator: Each eduroam Admin has an account in the eduroam Federation Manager to add/edit/remove contact info, make changes to configurations, location information, etc. eduroam Admins can add and manage other
eduroam Admins
Support Contact: This should be a contact where your users can get help connecting to eduroam. Preferably a group, published on maps and exported to eduroam.org where it can be displayed on the eduroam companion.
Report Contact: This should be a contact to receive your monthly/semi-annual/yearly reports. eduroam Admins can change any of the roles above by logging into the eduroam Federation Manager.
Role Change Web Form
Not sure which roles you have or need to change? Check our Community Organization Directory to see which services you’re subscribed to. Fill out this form to change roles for your organization.