On this page you will find instructions on how to use the Moonshot Test Network which mirrors the actual Trust Router infrastructure.
The usage of the Moonshot Test Network is subject to standard Terms and Conditions, including the right to terminate your access to this network prematurely.
The Moonshot Test Network
The Moonshot project has created a test network (kindly hosted by the Trust & Identity Directorate at Jisc) that demonstrates the functionality of the Moonshot technology. Free to use for piloting and testing, this network is designed to be the next step towards a full deployment and joining a Moonshot network. This test network includes an identity provider (to test your services with), two service providers (to test your identity provider with), and a trust router and APC.
Domains and realms
To demonstrate the difference between trust realms, identity realms, and the actual domain name system, and to avoid conflation of these concepts, the test network uses different values for each.
The trust realm suffix on the test network is
The only identity realm provided on (and by) the test network is
Communities of Interest (COI)
The only community of interest (COI) that currently exists on the test network is the APC community,
The domain names for the standard network hosts are registered in the
The APC is
The Trust Router
The Trust Router (TR) is
The Identity Provider (IdP) is
The first Service Provider (SP) is
The web service
The second SP is
The Moonshot portal is
Often test services are run in cloud infrastructures such as AWS, Azure or Google Cloud. They are also run in DMZ zones, or, in some instances, in private virtual infrastructures behind a firewall.
Registration for use
To use this network, you must apply for an organisation credential. The credential must be used by all your services to identify them to the test network's trust router. To apply for such a credential, email email@example.com with details of your organisation, how long your pilot/testing will run, and your domain and host names. We will invite you to the portal where you are provided with a time-limited credential that will expire at the end of your pilot. If your credential needs to be extended, email us with an approximate extension, and we will adjust the expiry date.
Once your pilot is concluded and you decide to transition to a production network, see the list of trust router operators for one that suits you (currently just Jisc).
How to use the network
The network is designed to allow you to use both the services and the identity provider to test your own services and your own identity provider. If you are part of a group of organisations or services trying out Moonshot, you can also test your own services and identity providers amongst your group, using the test network as a facilitator.