Kelderby: single sign-on weekend 1 (Rotterdam, Antwerp, Ghent)
Description
Tracking Kelderby's first single sign-on weekend (change OPS-51).
| Depot | People | Rehearsal | Switch |
|---|---|---|---|
| Rotterdam | 140 | Thu 22 Oct | Sat 24 Oct, 04:30 |
| Antwerp | 95 | Thu 22 Oct | Sat 24 Oct, 04:30 |
| Ghent | 75 | Thu 22 Oct | Sat 24 Oct, 04:30 |
Before: depot list and the first three test accounts by Tuesday (SUP-1254). Thursday's rehearsal with Henrik: a test sign-in per depot, then switch the test depot back and time it. Sanne signs off on Thursday after the rehearsal.
Saturday: Henrik switches the three depots on in the portal at 04:30. ACME on the bridge from 05:00 to 09:00: me, Oskar Lund (on call) and Tom. Henrik and Priti for Kelderby; Ruth from Rotterdam from 06:00.
If a depot can't sign in: Henrik and I decide. A depot goes back to passwords only if most of its people can't sign in; a few people in the wrong group are fixed in Entra ID instead (runbook: switch a depot back to passwords).
Linked issues
- relates to SUP-1254 Kelderby: depot list and test accounts for the pilot depots Done
- relates to SUP-1225 Kelderby: switching a depot back on a Saturday, how long and who? Done
- relates to SUP-1260 Kelderby: 'No account for this sign-in' for some people on switch morning Done
- relates to SUP-1261 Kelderby: Ghent drivers refused by Entra ID on switch morning Done
- relates to SUP-1264 Kelderby: duplicate people after the first single sign-on weekend Done
- relates to OPS-51 Kelderby: switch Rotterdam, Antwerp and Ghent to single sign-on, Saturday 04:30 Done
Comments (15)
Rehearsal passed for all three; switching the test depot back took 4 minutes. Sanne signed off at 14:00.
Emailed the three depot managers the switch time. Nothing in the product does that yet; the email the day before a depot switches is part of ACM-293.
Henrik switched Rotterdam, Antwerp and Ghent on at 04:30.
Bridge open.
Early shift at Rotterdam: first Entra ID sign-ins going through.
Ghent: drivers get AADSTS50105. 19 of them are only in the old group KEL-Ghent-Users, not in KEL-Gent-Users, which the Ghent app allows. SUP-1261.
Decided with Henrik: Ghent stays on. 33 people at Ghent are already in, and switching back would send them to passwords for a group fix that takes under an hour. The 19 start on the gate's paper list.
A few people at Rotterdam and Antwerp get "No account for this sign-in"; Henrik is handling them (SUP-1260).
Henrik added the 19 to KEL-Gent-Users at 07:40.
All 19 signed in by 08:10.
Bridge closed. Oskar stays on call.
Ruth signed in with Entra ID at 10:05. Ruth's approver assignment still covers Rotterdam, and three requests were approved. Rotterdam's 12 agency drivers on shift signed in with phone codes as before; the switch doesn't touch them.
Weekend summary:
- 290 of 310 people signed in with Entra ID by Sunday evening (251 by Saturday 18:00); the rest weren't on shift
- Ghent: 19 drivers missing from KEL-Gent-Users (only in the old KEL-Ghent-Users), fixed by Henrik at 07:40; all in by 08:10
- 9 people got "No account for this sign-in" (Rotterdam 5, Antwerp 3, Ghent 1); Henrik made them new accounts to get them working. We check for duplicates on Monday
- Nobody was signed out by the switch; sessions ran until they ended
- No depot switched back
The nine duplicates were merged this morning (SUP-1264). Notes are on the Confluence page for the pilot weekend. Closing; the second weekend is change OPS-52.
Depot list and the first three test accounts are in (SUP-1254).