Identity Management (IdM)

During the specified maintenance window, the IT Center will perform maintenance on the MySQL databases used by the Multi-Factor Authentication (MFA) service. As part of the maintenance, the databases will be unavailable for a total of approximately 15 minutes.

During this time, new logins to services using RWTH Single Sign-On will not be possible. Existing sessions will remain active and will not be affected by the maintenance.

Currently, there are still some organizations that have only one person listed as a role administrator, and for whom the expiration date of the “Verwaltung Rollen” role has already passed.
Until now, in such cases, the last person with the “Verwaltung Rollen” role was not stripped of that role. Going forward, this mechanism will be discontinued for security reasons.
The affected individuals and organizations were contacted in advance via email and asked to ensure or extend role administration, if still needed.
On July 31, 2026, all expired assignments of the “Verwaltung Rollen” role will be revoked. Organizations that have not responded by then will be unable to act.
Role management is of fundamental importance for using the IT services at RWTH. We generally recommend assigning the “Verwaltung Rollen” role to at least two people per organizational unit.
If your organization no longer has active role management but needs it, please contact the ServiceDesk.

As announced, many roles will expire at the same time this weekend (July 4). Currently, only about 75% of the affected persons have redeemed their coupons to renew their roles.
In addition, individuals who manage groups have been contacted via email. These people do not need to take any action; the configuration in Identity Management has been adjusted so that, as with group members, the status role will only be revoked if a person does not have a valid status role (e.g., “Employee”) at RWTH.
You can find the original announcement here.