Kelderby: switch Rotterdam, Antwerp and Ghent to single sign-on, Saturday 04:30

Project: Operations
Type: Change
Status: Done Done
Priority: Medium
Organization: Kelderby
Reporter: Clara Rossi <clara.rossi@acme-hq.example>
Assignee: Oskar Lund <oskar.lund@acme-hq.example>
Labels: kelderbysingle-sign-ongo-live
Components: identity-service
Created: 19 Oct 2026, 09:00 UTC
Updated: 26 Oct 2026, 11:00 UTC
Resolved: 24 Oct 2026, 07:15 UTC

Description

First of Kelderby's two pilot weekends before go-live on Monday 2 November (Confluence CS › Kelderby rollout plan, OPS › Change calendar).

Rehearsals passed for all three on Thursday 22 October; Sanne Bech signed off.
Saturday 24 October 04:30: Henrik Lund switches each depot on in the portal's single sign-on settings.
ACME's bridge 05:00–09:00: Clara, Oskar on call, Tom.
Way back per depot: switch it back to passwords (4 minutes in the rehearsal), only if most of a depot's people can't sign in.
Freeze from Friday 12:00 to Monday 12:00.

Linked issues

relates to SUP-1261 Kelderby: Ghent drivers refused by Entra ID on switch morning Done
relates to ENG-1838 Duplicate people after the first single sign-on when the imported email differs from the Entra ID UPN Open
relates to ENG-1809 Kelderby: engineering on the first rehearsals, and a switch-back rehearsal Done
relates to SUP-1251 Kelderby: single sign-on weekend 1 (Rotterdam, Antwerp, Ghent) Done
relates to ENG-1824 Count only failed sign-ins per address, so a depot's shared PCs aren't locked out at shift start Done
relates to ENG-1827 SAML: match the email whatever its case (Kelderby's Entra ID sends it capitalised) Done
relates to ENG-1831 People: search on the server for clients with thousands of people Done
relates to OPS-52 Kelderby: switch Duisburg, Venlo, Liège and Breda to single sign-on, Saturday 04:30 To Do

Comments (4)

Oskar Lund · 24 Oct 2026, 03:05 UTC

Henrik switched all three at 04:30. Bridge open.

Oskar Lund · 24 Oct 2026, 04:25 UTC

Ghent: 19 drivers refused by Entra ID (AADSTS50105), not in the depot's group. Ghent stays on: 33 people there already in, and the group fix takes less than an hour. The 19 use the gate's paper list (SUP-1261).

Oskar Lund · 24 Oct 2026, 07:15 UTC

Henrik added the 19 at 07:40; all in by 08:10. Bridge closed at 09:00. No depot switched back; nobody signed out by the switch; agency drivers on phone codes untouched. Closing.

Clara Rossi · 26 Oct 2026, 11:00 UTC

Monday: the nine people refused on Saturday with 'No account for this sign-in' (SUP-1260) got second accounts from Henrik; Yusuf merged them by 11:30 (SUP-1264). Engineering's follow-up is ENG-1838.