Single sign-on checklist

For every depot that switches to single sign-on. Copy it into the customer's go-live plan.

Three weeks before

• [ ] Agree which depots switch on which weekend. Seven depots or fewer per weekend.
• [ ] Name the customer's identity administrator (Entra ID or Okta) and their phone number for the morning of the switch.
• [ ] Agree who signs off each weekend on the customer's side.

From the customer, by the Tuesday before the switch

A list of depots and one test account per depot, by the Tuesday before the switch.

• [ ] The depot list: each depot, its people, its manager.
• [ ] One test account per depot in their Entra ID or Okta, in that depot's group.
• [ ] The group (or attribute) that says who may sign in at each depot.
• [ ] Each depot's app set up and its metadata uploaded in the portal.
• [ ] Accounts for new starters at the depot exist.
• [ ] An export of usernames (UPN for Entra ID). Compare it with the emails we imported: a person whose username differs can't sign in, and a new account made for them on the day leaves two records.

Thursday: rehearsal

• [ ] Sign in each depot's test account through the customer's identity provider.
• [ ] Check the test person lands at the right depot with the right role.
• [ ] If a depot fails, it waits for the next weekend. Don't switch an untested depot.
• [ ] Rehearse switching one depot back. Note how long it took.
• [ ] Customer signs off.

The day

• [ ] Switch before the first shift (04:30 for a 05:30 start).
• [ ] ACME on a bridge for the first shift: implementation manager, on-call engineer, sales engineer.
• [ ] The customer's identity administrator reachable by phone.
• [ ] If most of a depot can't sign in: switch it back (Runbook: switch a depot back to passwords). If a few can't: fix their group.

After

• [ ] Count who signed in by the evening and the next day.
• [ ] Look for duplicate people on the first working day and merge them.
• [ ] Note what went wrong on the customer's page.

Change history

Version	Date	Who	What
1	6 Feb 2023	Ana	First checklist
7	23 Mar 2026	Ana	After Brakeline: one test account per depot, by the Tuesday before the switch; new starters' accounts
9	19 Aug 2026	Clara	Customer uploads metadata in the portal
10	16 Oct 2026	Clara	Rehearse switching back; link to the runbook
11	19 Oct 2026	Clara	Who signs off on the customer's side
12	27 Oct 2026	Clara	Compare usernames with imported emails (Kelderby's duplicates)