When a WebLab account is linked to a netid account from TUD SSO, one could always setup a WebLab username and password in the account settings, which allows one to sign in on WebLab using the non-TUD login.

For TUD students/employees, WebLab should only rely on the authentication of the account by SSO, and not by a secondary authentication method with a user chosen username/password. The latter poses a unnecessary security risk when the password is set once, but never updated or when the password appears in a data breach.

Submitted by Elmer van Chastelet on 12 March 2025 at 14:37