Policy for NROs
eduroam NROs have the full authority to admit eduroam SPs within their country or region. eduroam Managed SP changes nothing in that regard; it is merely a new technical vehicle to get eduroam SPs on board. Insofar, no particular policy is required.
Policy for eduroam SPs
eduroam SP administrators are bound by the requirements as set forth in the eduroam Service Definition. Additionally, NROs are expected to make their eduroam SPs aware that the RADIUS server uplink they receive consists of the tuple (IP address, port, shared secret) and that these uplink details are to be kept secret by the eduroam Managed SP administrator.