Release Notes / Customer Information

SR-Ludwigshöhe 23.11.2025

Status: Final (17.11.2025)
The Release Notes (RN) report on the enhancements, as well as new functionalities and changes to the eIAM Services as per the Roadmap FCh-DTI. Please direct your questions about the release to
Please note that dates for the completion of documentation and concepts usually refer to the end of a release period and have nothing to do with the individual release dates (Release Dates) for functionalities.


Launch date
  • REF:      ⇨ 23.09.2025 ↴
    ⚒ Regression testing ❌❎ ✉➔ eIAM ⚒✅
  • ABN:    ⇨ 22.10.2025 ↴
    ⚒ Regression testing ❌❎ ✉➔ eIAM ⚒✅
  • PROD:  ⇨ 23.11.2025 ↴
    Sunday ⚒ Final Inspection ❎❎ ✉➔ eIAM
Changes - Innovations
Following the release of «Liskamm», which was a major release with numerous innovations and changes in eIAM that had a significant impact on both the specialist and end users due to the introduction of AGOV-First, the ‘Ludwigshöhe’ release introduces significantly fewer and smaller changes in eIAM that may potentially affect you as an eIAM customer.
  • Extended information about user identities in the eIAM-AM access tenants
  • eIAM Delegated Mgmt – Support for Voucher Codes in Bulk Onboarding
  • Single sign-on (SSO) for access to eIAM MyAccount has been discontinued (reminder)

Regression testing by eIAM customers

Your cooperation is necessary and very important. In the last releases, we had problems in the higher operating environments (ABN, PROD) only where applications had not carried out their regression tests in advance on REF and/or ABN. These are unnecessary problems which we can avoid together. We count on your support here. It is important that you carry out your regression tests carefully and report any problems to the testing team promptly and in a qualified manner.

Process and expectations for SR introductions

In order to be able to guarantee the stable and secure productive eIAM service, we require meaningful regression tests of the applications in the REF and ABN instances until the SR rollout to PRODUCTION. Normally you have 10 working days at your disposal for this. Please note that in the first 2 days after installation you can benefit from an Early Live Support Team that will assist you promptly in the case of problems.

These release notes will help you to plan the regression tests in relation to the eIAM functionalities you use and will also serve as a source of information for your end customer communication. Please note that the final version of the release notes with all necessary details will be delivered shortly before the productive installation.

Important
Let us know your release test results (positive or negative) via Feedback form customer regression tests. (only accessible from the Federal Administration network) so that any service release corrections can be made in good time.

eIAM contact person

If you have any questions or concerns about eIAM, ePortal or PAMS you can contact the following offices or persons;

eIAM contact points
×

Changes - Innovations

Extended information about user identities in the eIAM-AM access tenants

With the release of «Ludwigshöhe», information about the type of authenticating identity and its verification has been improved in the eIAM-AM Access clients. Authorisation officers can use this information to make decisions about granting authorisations. The support organisation of the specialist department can use the information to identify which login method (authenticating identity) the user with the identity reference (authorising identity) maintained in eIAM-AM uses and whether this identity is considered verified.

Two new attributes are introduced for this purpose.

Account origin
Contains information about the source of the authenticating identity. Possible values are:

  • Standard Identities
    • AGOV
    • CH-LOGIN
    • FED-LOGIN
  • BYOI Identities
    • GenèveID
    • ZUGLOGIN
    • #edaLogin
    • SWITCH edu-ID
  • Sector Identities
    • OTP-Login
    • FEDRO
    • FOEN
    • FOC
    • FCA
    • Guest-Login
    • FER eAdminPortal-Login
    • IGAKIS AkisNetPortal-Login
    • IGS eAdminPortal-Login
    • PTI-LOGIN
    • HIN/HIN-EPR
    • V-Login

Account verified
Contains information about whether the authenticating identity is verified.

Possible values are:

  • FALSE - The identity is considered not verified (eIAM QoA less than or equal to QoA30)
  • TRUE - The identity is considered verified (eIAM QoA greater than QoA30)
  • <not set>
Display of extended information about the user’s identity in the eIAM-AM access tenant.
Attribute «Account origin» & «Account verified»


For further information on the new attributes and the use of this information, please refer to the training materials for BVA/GKA here: IDM Roles & Access Assignments

Notes:
The two attributes will only be set for identity references with a CH-LOGIN identity if they are actively used. If the two fields are empty, you can therefore assume that it is a CH-LOGIN identity that has not yet been used since the introduction of the feature.

eIAM Delegated Mgmt – Support for Voucher Codes in Bulk Onboarding

eIAM delegated management allows not only the creation of individual invitations for a single user, but also so-called bulk onboarding, in which multiple users can be invited by the delegated manager using an input file. A new feature now allows voucher codes for a potentially required video identification in AGOV to be included in the input file. The voucher code can now be used as a variable in the invitation template, enabling it to be sent with the invitation via email or letter. Further information on delegated management and bulk onboarding can be found at Access to the eIAM Admin Portal.

Single sign-on (SSO) for access to eIAM MyAccount has been discontinued (Reminder)

In the past, users could self-administer their accounts in eIAM using single sign-on between the login to the specialist application and the login to the eIAM self-administration portal ‘MyAccount’. Applications could offer users a link to MyAccount, which did not require them to log in again. This SSO link from the specialist application to MyAccount will no longer be available in future. On the one hand, the functionality is not compatible with the new integration patterns of eIAM. On the other hand, it is no longer up to date from a security perspective. The SSO function will no longer be available with the eIAM release ‘Matterhorn’ (REFERENCE 09.12.2025 / ACCEPTANCE 14.01.2026 / PRODUCTION 01.02.2026). Applications are requested to completely remove this function when switching to MyAccount or to reconfigure the function so that the URL of MyAccount from eIAM is called directly in a new browser window on the respective operating environment (REFERENCE, ACCEPTANCE, PRODUCTION). The user will then be prompted to log in. This ensures that the subject using eIAM MyAccount is actually the authorised owner of the identity, even if the user's device has been unattended for a long period of time.

Environment URL
PRODUCTION https://www.myaccount.eiam.admin.ch
ACCEPTANCE https://www.myaccount-a.eiam.admin.ch
REFERENCE https://www.myaccount-r.eiam.admin.ch
Table with the URLs to be used to call up eIAM MyAccount.