Kelderby rollout plan
By Clara Rossi · created 10 Aug 2026, 09:00 UTC · last updated 27 Oct 2026, 15:30 UTC · version 12
kelderbysingle-sign-onrolloutgo-live
How Kelderby's pilot depots move to single sign-on with Entra ID before go-live on 2 November.
The plan
Two weekends, so each depot can rehearse first: Rotterdam, Antwerp and Ghent on 24 October; Duisburg, Venlo, Liège and Breda on 31 October. The other 18 follow.
People keep their passwords until their depot switches, so nobody is locked out before their weekend.
| Depots | People | Switches on | Status |
|---|---|---|---|
| Rotterdam, Antwerp, Ghent | 310 | Sat 24 Oct | Done. See the pilot weekend notes |
| Duisburg, Venlo, Liège, Breda | 300 | Sat 31 Oct | Rehearsal Thu 29 Oct |
| 7 depots | 610 | by 1 Nov |
The other 18 depots switch before Christmas with ACM-293, which switches every tested depot of a customer in one go. ACM-323, Kelderby's own plan for the 18, was merged into it on 19 October.
What we need from Kelderby
As the single sign-on checklist asks, by the Tuesday before each weekend:
| Item | From | Due | Got |
|---|---|---|---|
| Depot list: each depot with its people and its manager | Priti | Tue 20 Oct | Tue 20 Oct (SUP-1254) |
| One test account per depot in Kelderby's Entra ID | Henrik | Tue 20 Oct first three, Tue 27 Oct the rest | Both on time |
| The Entra ID group per depot | Henrik | with the list | KEL-<depot>-Users |
| Sign-off for the weekend | Sanne Bech | the Thursday before | Thu 22 Oct; Thu 29 Oct due |
One depot's switch
- Tuesday: Henrik sets up the depot's enterprise app in Entra ID and uploads its metadata in the portal.
- Thursday: rehearsal. Clara and Henrik sign in the depot's test account through Entra ID. If it fails, the depot waits for the next weekend.
- Saturday 04:30: Henrik switches the depot on in the portal's single sign-on settings. ACME is on the bridge from 05:00 to 09:00 (Clara, the on-call engineer, Tom).
- From the first shift: people sign in with their Kelderby account. Anyone already signed in stays signed in until their session ends.
- If sign-in fails for the depot: the depot goes back to passwords. Kelderby's administrator does it in the portal, or ACME's on-call engineer on request; it took 4 minutes in the rehearsal. See Runbook: switch a depot back to passwords.
Each depot in Entra ID is its own enterprise app today, with its own certificate and sign-in address. Seven depots mean seven setups; that is why the 18 wait for ACM-293.
Who decides
- Sanne Bech signs off each weekend on the Thursday, after the rehearsal.
- On the day, Clara and Henrik decide together whether a depot goes back. A depot goes back only if most of its people can't sign in; a few people with a wrong group are fixed in Entra ID instead.
Change history
| Version | Date | Who | What |
|---|---|---|---|
| 1 | 10 Aug | Clara | Draft: seven depots over two weekends |
| 2 | 18 Aug | Ana | Go-live date fixed; Kelderby agreed to two weekends |
| 4 | 21 Aug | Clara | Metadata upload; SUP-1116 |
| 5 | 9 Oct | Ana | Depot list and test accounts due 20 October (Priti's email of 8 October) |
| 6 | 12 Oct | Ana | The other 18 follow, with ACM-293 |
| 7 | 16 Oct | Clara | Switch-back runbook linked; who may do it at the weekend |
| 8 | 19 Oct | Clara | ACM-323 merged into ACM-293; Sanne signs off each weekend |
| 9 | 20 Oct | Clara | Depot list and first test accounts received |
| 10 | 22 Oct | Clara | Rehearsal passed for all three; switch back took 4 minutes |
| 11 | 26 Oct | Clara | First weekend done |
| 12 | 27 Oct | Clara | Liège group fixed; second weekend ready for rehearsal |