Authentifizierung (RWTH Single Sign-On, MFA)

The current signing and encryption certificate for the Shibboleth Identity Provider expires in June. To ensure uninterrupted service, a new certificate has been installed on the IdP. The rollover will take place in stages: The new certificate will initially be active alongside the old one (dual-key operation), allowing service providers to update their metadata before the old certificate is deactivated.

During the specified time period, due to legal requirements regarding the affiliation status of various user groups within the university, the eduPersonAffiliation is being updated for some user groups. This will affect services connected to the SSO, as more or fewer users (depending on the service’s authorization policy) may gain access.
The change is based on the affiliations recommended by IDM.nrw for these user groups.