skip to content

IT Help and Support

University Information Services

What are institutional network access tokens?

IT staff can create network access tokens for shared devices owned by the institution. These are devices that are not owned by an individual and associated with an individual's CRSid.

You'll need to create a unique institutional token for each shared device, and this token username should not be used for any other devices. This service should not be used for devices owned and used by a single person. These should use an individual user's network access token

The devices will be connecting to eduroam, so they'll need to support 802.1x authentication (also known as WPA2/3-Enterprise). 

You can create new tokens and manage your existing institutional tokens via the UIS Network Access Tokens website.

Get administrative access

Access is controlled through membership of a Lookup group that institutions can manage themselves. The group is usually called 'University Wireless administrators for [name of institution]'.

If you're already a member of this Lookup group, and your institution has institutional network access tokens enabled, you'll see a tab labelled with your institution's name on the UIS Network Access Tokens site:

Network access Tokens website with the admin institution tab highlightedIf you're not a member, please contact your local IT staff and ask to be added.

Create institutional tokens

  1. Once you have been given administrative access to your Network Access Tokens website, select the tab labelled with your institution's name on (see above) to access the institutional tokens page.

  2. To create a new token, add a short description to help you remember what you’re using it for. Then set the ‘Valid from’ and ‘Valid to’ dates for the token. By default, the ‘Valid from’ date will be set to today.

    Create a network access token screen

  3. Your new institutional token’s username and a randomly generated password will be displayed. Use these to set up your device or VPN connection. For security purposes, the password will only be displayed once so leave this window open on your device, ready to copy and paste it. Some browsers can add extra spaces when you copy and paste so if your password isn’t working, you can try typing it. 

    Network access token username and password screen

  4. Once you have used it, click 'Done' to be returned to the token management page.

Manage your institutional tokens

A list of your institutional tokens is displayed in a table below the 'Create a new token' section. It shows the username, description, valid to and from dates, and status of each token.

List of institutional tokens on network access token admin screen

You can reset, temporarily suspend or permanently delete your tokens by clicking the buttons in this table.

Reset a token

'Reset' creates a new randomly generated password for a token. You might use this when you think someone else may have obtained the token's password or when you've reset a device and need to enter a username and password again.

Suspend a token

'Suspend' temporarily disables a token. This will prevent anyone from using it to log in, but it won't log out someone who is logged in already.

Delete a token

'Delete' permanently deletes a token. Any device that was using this token won't be able to connect until you create a new token for it. Don't worry, you'll be asked if you're sure before the token is deleted.


View your Lookup group for your institution

Access to the institutional token tab is determined by a Lookup group. Any member of this group is considered an administrator for your institution's tokens and will have the ability to:

  • create tokens
  • reset tokens
  • delete and suspend institutional tokens
  • view the audit history for the institution's tokens

You can see which Lookup group manages your institution's tokens by clicking on the 'Admin' tab.

Network access token admin group screen


View the audit history for your institution

You can see a list of all activities in your institution's tokens administration by clicking the 'Audit' tab.

Network access token audit screen

Get support

If you'd like to enable this functionality for your institution or have any queries about how it works, please contact .