Authentifizierung (RWTH Single Sign-On, MFA)

The current signing and encryption certificate for the Shibboleth Identity Provider expires in June. To ensure uninterrupted service, a new certificate has been installed on the IdP. The rollover will take place in stages: The new certificate will initially be active alongside the old one (dual-key operation), allowing service providers to update their metadata before the old certificate is deactivated.

As of today, 9:30 AM, the new certificate is active in the metadata. If you experience issues with your service provider, please reload the metadata once:

https://sso.rwth-aachen.de/metadata/rwth.metadata.xml
On 26 June 2026 at 09:30 AM, the metadata signature will be updated. The new certificate for verifying this signature is available immediately at:

https://sso.rwth-aachen.de/metadata/sso_2026.pem

There may currently be issues logging in via RWTH Single Sign-On (SSO).
This is because a new certificate has been active in the metadata since 9:30 a.m. today.
The relevant department has been notified and is working with the system operators to resolve the issue.