Release Notes / Customer Information

SR-Mönch 10.05.2026

Status: Final (08.06.2026)
The Release Notes (RN) report on the enhancements, as well as new functionalities and changes to the eIAM Services as per the Roadmap FCh-DTI. Please direct your questions about the release to
Please note that dates for the completion of documentation and concepts usually refer to the end of a release period and have nothing to do with the individual release dates (Release Dates) for functionalities.


Release Dates

   REF ⇨ 17.03.2026 ↴
   Customer regression tests

   ABN ⇨ 21.04.2026 ↴
   Customer regression tests

   PROD ⇨ 10.05.2026
   Sunday – Final acceptance by customers


Changes - Innovations
  • CH2A Phase AGOV-Push
  • FED-LOGIN – Passwordless – Implementation
  • FED-LOGIN – Delivery of the AHV number for employees of the Federal Administration
  • FED-LOGIN - Login with "Active Directory" despite autologon cookie
  • Guest-Login – Decommissioning
  • New software version of various eIAM components
  • eIAM-AM - Removal of unused Legacy SAML Federation Credentials in nevisIdm Access Tenants
Breaking Changes
  • FED-LOGIN – End of support for outdated Android versions
  • eIAM-AM user attribute “Last Login” is no longer being updated – update of 27 May 2026

Regression testing by eIAM customers

Your cooperation is necessary and very important. In the last releases, we had problems in the higher operating environments (ABN, PROD) only where applications had not carried out their regression tests in advance on REF and/or ABN. These are unnecessary problems which we can avoid together. We count on your support here. It is important that you carry out your regression tests carefully and report any problems to the testing team promptly and in a qualified manner.

Process and expectations for SR introductions

In order to be able to guarantee the stable and secure productive eIAM service, we require meaningful regression tests of the applications in the REF and ABN instances until the SR rollout to PRODUCTION. Normally you have 10 working days at your disposal for this. Please note that in the first 2 days after installation you can benefit from an Early Live Support Team that will assist you promptly in the case of problems.

These release notes will help you to plan the regression tests in relation to the eIAM functionalities you use and will also serve as a source of information for your end customer communication. Please note that the final version of the release notes with all necessary details will be delivered shortly before the productive installation.

Important
Let us know your release test results (positive or negative) via Feedback form customer regression tests. (only accessible from the Federal Administration network) so that any service release corrections can be made in good time.

eIAM contact person

If you have any questions or concerns about eIAM, ePortal or PAMS you can contact the following offices or persons;

eIAM contact points
×

Changes - Innovations

CH2A Phase AGOV-Push

CH2A is the initiative to gradually replace CH-LOGIN of the Federal Administration with AGOV, the government login of Switzerland. With the eIAM release «Mönch», the phase «AGOV-First» ends and the next phase «AGOV-Push» begins. The «AGOV-Push» phase will last until 14 February 2027 (start of the «AGOV-Force» phase). With «AGOV-Push», the changes documented below are implemented in eIAM. Further information about the CH2A initiative and the current «AGOV-Push» phase can be found at: AGOV / CH2A . We would also like to draw your attention to the information for eIAM stakeholders presented at the two customer events on 20 and 27 February 2026. These materials are available in the eIAM Soundingboard: .

AGOV-Push - Registration in CH-LOGIN no longer possible

With the «AGOV-Push» phase, the registration of new CH-LOGIN accounts is blocked. Users are already informed when selecting CH-LOGIN as the login method that new CH-LOGIN accounts can no longer be registered and that AGOV should be used instead. When attempting to register a new CH-LOGIN account, users are shown a message informing them that CH-LOGIN is being replaced by AGOV and that new accounts can therefore no longer be created. A function is provided to register an AGOV login instead of a CH-LOGIN.

AGOV-Push - Prompt to switch from CH-LOGIN to AGOV

With the «AGOV-Push» phase, users are presented with an intermediate page after selecting the CH-LOGIN login method and before being redirected to the login page. This page prompts users to use or register an AGOV login. Users are given the option to continue with AGOV or with CH-LOGIN. Users can still freely choose when to switch from CH-LOGIN to AGOV. There is currently no obligation to switch from CH-LOGIN to AGOV. This requirement will only be introduced in the «AGOV-Force» phase starting in mid-February 2027.

AGOV-Push - Skipping the prompt to switch from CH-LOGIN to AGOV for test automation and monitoring

During the «AGOV-Push» phase, users are intentionally encouraged to switch from CH-LOGIN to AGOV. However, automated processes such as test automation and end-to-end monitoring can be negatively affected by changes in the login flow, such as the intermediate page described above when selecting the CH-LOGIN login method. This also applies to other temporary notifications addressed to users (for example about upcoming maintenance work). eIAM takes the requirements of test automation and E2E monitoring into account and provides a solution for such specific use cases that can be implemented easily from a technical perspective within test automation.

Further information can be found at: Testing without notifications

FED-LOGIN – Passwordless – Implementation

FED-LOGIN is the primary identity provider (login method) used by employees of the Federal Administration and the cantons. In addition to login with a smartcard and automatic login on Federal Administration office automation devices (Active Directory Single Sign-On), FED-LOGIN also supports complementary login methods.

Besides the modern and secure complementary login methods «FED-LOGIN Access App» for Apple iOS and Google Android devices and physical security keys (FIDO2), additional login methods have also been supported in the past. These methods are based on a password combined with a second factor. As already announced in the Release Notes of the «Matterhorn» release, password-based login methods are no longer supported.

The affected login methods include in particular:

  • Password and mTAN (SMS code)
  • Password and One-Time Passcode (generated by an authenticator app such as Microsoft or Google Authenticator)
  • Password and Mobile ID
Starting with the «Mönch» release, users can only use the modern and secure complementary FED-LOGIN login methods FED-LOGIN Access App and/or security keys (FIDO2), which operate completely without passwords.

FED-LOGIN – Delivery of the AHV number for employees of the Federal Administration

With the « Mönch » release, eIAM is able to deliver the AHV number of employees of the Federal Administration to the application in the token after they have authenticated with their enterprise identity via FED-LOGIN. This is a new attribute that is not part of the standard attribute set of eIAM. The attribute must be ordered separately for the eIAM-integrated application. Requirements regarding the systematic use of the AHV number must be observed.

FED-LOGIN - Login with "Active Directory" despite autologon cookie

For specific use cases such as manual testing from the federal administration network or the targeted use of an identity provider other than FED-LOGIN, the automatic login with FED-LOGIN and Active Directory can be prevented by setting a cookie. Until now, it was not possible to set the autologon cookie and still perform a login with Active Directory from the federal administration network. Starting with the Mönch release, this combination is supported. On FED-LOGIN, login using Active Directory is now also possible, provided that the application’s authentication assurance requirements allow it.

Guest-Login – Decommissioning

In the past, Guest Login could be used exclusively for the application «VAT settlement easy» of the FTA in the ePortal. «VAT settlement easy» will no longer be offered from May 2026. It will be replaced by the solution «VAT settlement pro». As a result, the possibility to log in to the ePortal using Guest Login will also be discontinued. To support a guided and transparent transition for end users, the «Guest Login» login method will remain available for a transitional period. However, logging in with Guest Login will no longer be possible. After selecting the «Guest Login» login method, end users will be informed about the shutdown of «VAT settlement easy» and therefore of Guest Login. They will then be guided to use their existing AGOV login or to register an AGOV login.

New software version of various eIAM components

Dans le cadre de la gestion du cycle de vie et afin de garantir la fonctionnalité et la sécurité d’eIAM, plusieurs composants eIAM sont mis à jour vers la version logicielle actuelle.

eIAM-AM - Removal of unused Legacy SAML Federation Credentials in nevisIdm Access Tenants

The eIAM service uses SAML Federation Credentials to link identity references in eIAM-AM Access tenants to the federated identity. In the past, in addition to the SAML Federation Credential pointing to the federated identity (Issuer=eIAM), other SAML Federation Credentials were also mapped in the Access tenant, which pointed directly to the authenticating identities. The SAML Federation Credentials pointing directly to authenticating identities were deleted with the Mönch release, as they have no longer been used for some time.

Breaking Changes

FED-LOGIN – End of support for outdated Android versions

As part of the public Bug Bounty program, a security-relevant vulnerability was identified in Android versions OS 10 and older. These devices have not received security updates since 2023 and are therefore no longer permitted for use with the FED-LOGIN Access App.

A new version of the FED-LOGIN Access App has been published in the Google Play Store. This version is only visible for devices running Android version 11 or newer. With the eIAM release «Mönch», the use of outdated and unsupported Android versions will be blocked for FED-LOGIN. Users will be informed that they must use a device with a supported Android version. Switching to a still supported device remains possible at any time (including after the «Mönch» release) for users who are equipped with a Smartcard.

eIAM-AM user attribute «Last Login» is no longer being updated – update of 27 May 2026

Following the rollout of the “Mönch” release into production, performance issues were identified during high-load situations. In these situations, the IDM system and its database were placed under such heavy load that this resulted in degraded performance and, in some cases, login timeouts. All applications integrated with eIAM were affected, regardless of whether they use eIAM Access Management or not. One of the identified causes of these performance issues was the updating of the “Last Login” attribute by the eIAM IDM system. The function responsible for updating the IDM attribute «Last Login» had to be disabled in order to reduce the system load and to avoid further impacting user logins. The eIAM service is currently working together with the supplier of the IDM system on an in-depth analysis and on resolving the issue in order to make this information available again for you, as eIAM customers, without compromising the stability of the service.