TCS 2025 FAQ

How do I acccess the HARICA service?

HARICA Cert Manager is avaialble at: https://cm.harica.gr.  HARICA services can also be accessed via the API - API documentation can be found here: https://developer.harica.gr/. 

https://cm-stg.harica.gr/ can be used to test and get to know the service. 

How do I get support from HARICA?

Please use the following support address: support-tcs@harica.gr. 

What are the "levels" of authorisation called in the HARICA Service?

• Enterprise Manager = NREN Staff.
• Enterprise Admin = Organisational Staff with authorisation.

What is the onboarding process for HARICA?

The process is shown in the image below: 

Is SAML Supported? 

TCS members that are also Identity Providers in eduGAIN must release the following attributes:

• givenName
• sn
• email
• edupersonTargetedID

and may also release:

• eduPersonPrimaryAffiliation
• eduPersonPrincipalName (required by GEANT for GRID Client Authentication Certificates)
• eduPersonEntitlement (values TBD)

to the following HARICA EntityIDs:

• PRODUCTION
• “https://www.harica.gr/simplesamlphp/module.php/saml/sp/metadata.php/pki-grnet-sp”
• STAGING:
• “https://cm-stg.harica.gr/simplesamlphp/module.php/saml/sp/metadata.php/harica-cm-stg-sp”
• DEV:
• “https://cm-dev.harica.gr/saml/module.php/saml/sp/metadata.php/harica-cm-dev-sp”.

Known issues:

• Multiple values in the mail attribute is currently not supported.