ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.
Support / SUP-1261

Kelderby: Ghent drivers refused by Entra ID on switch morning

Project
Support
Type
Support request
Status
Done Done
Priority
High
Organization
Kelderby
Reporter
Henrik Lund <henrik.lund@kelderby.example>
Assignee
Tom Weber <tom.weber@acme-hq.example>
Labels
kelderbysingle-sign-ongo-live
Components
identity-service
Created
24 Oct 2026, 03:58 UTC
Updated
27 Oct 2026, 15:40 UTC
Resolved
24 Oct 2026, 06:12 UTC

Description

Ghent: since the early shift started, drivers get a Microsoft error page after signing in. Ghent's shift lead called our IT line at 05:42. Looking at it with Clara and Tom on the bridge.

Henrik

Linked issues

Comments (6)

Tom Weber · 24 Oct 2026, 04:12 UTC

It's AADSTS50105, "not assigned to the application". 19 drivers are only in the old group KEL-Ghent-Users, not in KEL-Gent-Users, which the Ghent app allows. Adding them to KEL-Gent-Users fixes it.

Clara Rossi · 24 Oct 2026, 04:22 UTC

Decided with Henrik: Ghent stays on single sign-on. 33 people at Ghent are already in, and switching back would send them to passwords for a group fix that takes under an hour. The 19 start on the gate's paper list.

Henrik Lund · 24 Oct 2026, 05:40 UTC

Added the 19 to KEL-Gent-Users.

Tom Weber · 24 Oct 2026, 06:12 UTC

All 19 signed in by 08:10. Ghent lost about 40 minutes of loading. Closing.

Clara Rossi · 26 Oct 2026, 09:00 UTC

Before Saturday, Henrik checks group membership for Duisburg, Venlo, Liège and Breda against the depot list.

Clara Rossi · 27 Oct 2026, 15:40 UTC

Henrik's check found 7 Liège people missing from KEL-Luik-Users, still only in the old KEL-Liege-Users; added today.