Skip to content

SurfConext Authentication with @ru.nl Account

status: resolved
references: CCZ-835
reported: 2024-11-26
resolved: 2024-12-11

Update 11 December: For all users that previously authenticated with a u-number, but have their (old) s-number as primary identifier within their @ru.nl account, we have copied the permissions to their @ru.nl account. We are in contact with our supplier (Emendis) in order to remove the username from the application header, and replace it by the e-mail address.

On 26 November, the Booking Platform for Scientific Devices switched its authentication for RU-accounts. From this date on, you will use your @ru.nl account to log into the Bookings application, instead of your U-/S-/E-/Z-number.

Although most users will not notice this change, some users might see some difference, such as seeing your student number instead of employee number, or in some cases even loss of booking permissions.

Who is affected by this?

This change only affects RU-accounts. If you login with your RadboudUMC account, nothing wil change. If you only have one RU-account (e.g. only an U-account), nothing will change either.

However, if you have or had two accounts or more (s-account and U-account), you might experience the above mentioned change of accounts.

Why is this happening?

Step by step, the Radboud University is transitioning from U-/S-/E-/Z-number accounts to @ru.nl accounts. Microsoft (Windows, Office), SURF FileSender, the Radboud Sport Center and BASS are already using the @ru.nl account to authenticate. On 26 November, it was the turn of the Booking Platform for Scientific Devices.

What is changing?

The U-/S-/E-/Z-number accounts are moving towards one single @ru.nl account per person. This means that the original accounts are merged into one. Applications that use the U-/S-/E-/Z-number authentication actually offered you two accounts. With the @ru.nl account, you have one set of credentials that cover both accounts and corresponding roles. In order to preserve as much data as possible, one of your accounts is kept as primary, the other is marked as secondary. The primary account is usually your oldest account - therefore often your s-account.

When authenticating in SurfConext with your U-number, the Booking application received your u-number as unique identifier. When authenticating with your @ru.nl account, SurfConext sends the identifier of your primary account - which is often your s-number. This is why is looks like you lost your permissions: the application received a different identifier and therefore considered it as a different account.

What are the consequences?

First of all, you might see you are authenticated with your s-number. This by itself is not a problem. The Booking Platform for Scientific Devices has no general permissions for students or employees - all permissions are accorded to you personally.

That being said, if you had permissions when authenticating with your U-account, these might be lost when you authenticate with your @ru.nl account. In that case, you might not be able to book devices anymore.

How can I fix this?

You cannot change which of the two accounts is your primary, this was a choice made by the Radboud University. In order to restore those permissions, you can ask the manager of your domain of device group to add those permissions to your @ru.nl account as well. Alternatively, you can contact C&CZ for assistance on this issue. To facilitate this process, please mention both your U- and s-account numbers.

Why do I see my student number if I'm not a student anymore?

Although it seems like your @ru.nl account has become a student account, there is an important difference between your student account and your @ru.nl account. Your student account - which had your student number as identifier - was directly linked to your student role at the university. Students that became employee after their graduation, received an employee account (with employee number as identifier) and saw their student account being disabled.

Now that we have @ru.nl accounts, people will keep the same @ru.nl account when they change from student to employee - and thus the same @ru.nl identifier. This identifier has not much to do with either your student role or employee role. For new students or employees, this identifier will look like a random set of characters, unable to relate to either a student number or employee number. However, in order to facilitate the transition, the identifier of your primary (U-/S-/E-/Z-number) account is used as identifier in your @ru.nl account.