> The institution where you're a guest knows your identity (often email address), The identity in the outer EAP does not have to be your real identity, just th

> The institution where you're a guest knows your identity (often email address), The identity in the outer EAP does not have to be your real identity, just the realm (@domain.dom) must be correct so the radius proxying can be routed appropriately. E.g., anonymous@example.edu in the outer EAP will work fine for the user, jdoe@example.edu.