Kelderby pilot weekend: Rotterdam, Antwerp, Ghent
By Clara Rossi · created 24 Oct 2026, 10:50 UTC · last updated 27 Oct 2026, 16:20 UTC · version 6
kelderbysingle-sign-onpilotgo-live
Notes from the first single sign-on weekend, Saturday 24 October. Change OPS-51.
On the bridge: Clara Rossi, Oskar Lund (on call), Tom Weber; Henrik Lund and Priti Shah for Kelderby; Ruth from Rotterdam from 06:00.
Result
All three depots stayed on single sign-on. None went back to passwords. 290 of 310 people had signed in with Entra ID by Sunday evening; the rest were not on shift.
| Depot | People | Signed in by Sat 18:00 | By Sun 18:00 | Trouble |
|---|---|---|---|---|
| Rotterdam | 140 | 118 | 131 | 5 people with no matching account; duplicates merged Monday |
| Antwerp | 95 | 81 | 90 | 3 people with no matching account; duplicates merged Monday |
| Ghent | 75 | 52 | 69 | 19 drivers refused by Entra ID until 08:10; 1 person with no matching account |
| Total | 310 | 251 | 290 |
Timeline (Saturday)
| Time | What happened |
|---|---|
| 04:30 | Henrik switched Rotterdam, Antwerp and Ghent on in the portal. |
| 05:00 | Bridge open. |
| 05:30 | Early shift at Rotterdam. First Entra ID sign-ins go through. |
| 05:42 | Ghent's shift lead calls Kelderby's IT line: drivers get a Microsoft error page. |
| 06:10 | The error is AADSTS50105, "not assigned to the application". 19 drivers are only in the old group KEL-Ghent-Users, not in KEL-Gent-Users, which the depot's app allows (Kelderby renamed the Ghent group in August). |
| 06:20 | Decision: Ghent stays on. 33 people at Ghent were already in; switching back would have sent them back to passwords for a group fix that takes less than an hour. The 19 start on the gate's paper list. |
| 07:40 | Henrik adds the 19 to KEL-Gent-Users. |
| 08:10 | All 19 signed in. Ghent lost about 40 minutes of loading. |
| 09:00 | Bridge closed. Oskar stays on call. |
| 10:05 | Ruth signs in with Entra ID. Ruth's approver assignment still covers Rotterdam; three requests approved. |
SUP-1261 has the Ghent details.
What else we saw
- Nobody was signed out by the switch. Sessions run until they end (eight hours); people from Friday's late shift signed in again on Saturday as usual.
- Agency drivers were not touched. Rotterdam had 12 on Saturday. They sign in with phone codes and the switch doesn't change that.
- No depot manager knew the time of the switch except through Clara's email on Thursday. The email the day before each depot switches is part of ACM-293, not built yet. Clara emails depot managers by hand for the second weekend.
Duplicates, found on Monday
On Saturday nine people (Rotterdam 5, Antwerp 3, Ghent 1) got "No account for this sign-in". The import had their private or old email; their Entra ID account had a different one, so sign-in found no person to match. To get them working, Henrik made each of them a new account in the portal with their Kelderby email. That gave each of them a second person record, and their roles and waiting requests stayed on the old one.
Yusuf merged all nine with Merge duplicate people by 11:30 on 26 October (SUP-1264). Engineering looks at matching on Kelderby's employee number at first sign-in (ENG-1838), as part of "Kelderby go-live hardening".
Before the second weekend
| Action | Owner | Due | Status |
|---|---|---|---|
| Check group membership for Duisburg, Venlo, Liège and Breda against the depot list | Henrik | Tue 27 Oct | Done. 7 Liège people were missing from KEL-Luik-Users, still only in the old KEL-Liege-Users; added. |
| Compare import emails with Entra ID UPNs for the four depots | Clara, Priti | Wed 28 Oct | Priti sent the UPN export; Clara is matching |
| Email each depot manager the time of the switch | Clara | Thu 29 Oct | |
| Same bridge, same hours | Clara, Oskar | Sat 31 Oct | Change OPS-52 |