Flexible self-service portal thanks to Azure Identity Management

The challenge was to set up and establish the Azure platform as a strategic cloud computing platform within BFH. Numerous sub-projects at BFH, which were already running on Azure, had to be brought into line for this purpose. The IT faculty and Trivadis had to integrate the Azure platform into BFH’s existing IT solution environment and also implement new use cases for Azure. In one such use case, software for robot technology was deployed on cloned, virtual machines, which students can then use in a course. Another use case involved giving students proper access to Azure resource groups with which they can create and use Azure resources themselves. Access to Azure environments should be made possible through the self-provisioning process to keep the flexibility and independence of the customer as high as possible. A further aim was to prevent any unused sessions that were not properly closed from incurring unnecessary costs.

First, BFH and Trivadis experts implemented the Azure EA portal (Enterprise Agreements) so that subscriptions and their costs can be managed and distributed correctly across the various faculties. They then created the network connection via siteto-site VPN, set up the network and implemented the security basis. Once the platform had been set up, the use cases were implemented. A recognised problem with sessions that had not been properly closed was solved by a script that at midnight automatically closes all sessions opened by the students at lectures during the day. Thanks to the new solution, internal customers of the IT Services have easy access to Azure environments for their lectures, research projects or other activities. One major advantage is the high degree of flexibility that BFH’s self-provisioning process enables. IT Services defines the framework conditions for the use of Azure in a simple process. The solution also offers the best possible cost control. Subscriptions and costs are centrally managed, unused sessions are automatically closed. With the help of Trivadis, BFH experts were able to build up the know-how and basic structure for the self-service portal.

Azure Identity Management is one of the biggest highlights. This makes it easy to pass on authorisations from a web login to the backend. The high level of security with which partners can be integrated into an existing Azure platform and authorisations granted also impressively demonstrates the success of the project.

Bern University of Applied Sciences (BFH) is an application-oriented university founded in 1997. In addition to teaching, its core competences include further education, research and development as well as services. BFH has eight faculties. 30 Bachelor’s and 23 Master’s programmes as well as numerous further education courses are offered. 2,500 employees and around 7,000 students work and study at the sites in Bern, Burgdorf, Biel, Zollikofen and Magglingen.