You might want to try 802.1X authentication to Eduroam. It may require the wpad (full) package if not already installed on your device. Doing so will require removal of the wpad-mini package and it unfortunately conflicts with the wpad-mesh package which is required for SAE for 802.11s.