Table of contents

• Introduction
• Required Azure Resources
  • Azure Resources Installed via Bicep
  • Corporate Entra ID Resources
• Authentication and Authorization
• How ILAP Analytics Integrates
• Installation Instructions for ILAP Analytics
• Disclaimer
• Conclusion

Introduction

ILAP Analytics is a software solution designed to run in a Corporate Azure environment, utilizing Microsoft Entra ID for authentication and application roles for authorization. It provides powerful tools for project planners and analysts to manage schedules, track changes, and gain actionable insights, all while integrating seamlessly into existing IT ecosystems.

Required Azure Resources

The following resources are necessary for deploying ILAP Analytics. Some are deployed automatically via Bicep templates, while others require manual configuration.

Azure Resources Installed via Bicep

Corporate Entra ID Resources

Authentication and Authorization

ILAP Analytics leverages Microsoft Entra ID for secure authentication and authorization. The configuration includes:

• App Registrations: These define how the user interface (UI) and API components authenticate users.
  
  

• Enterprise Applications: Enable role-based access controls (RBAC) for users and administrators.
  
  

• Azure Key Vault: Stores SSL certificates securely to protect the application’s endpoints.

How ILAP Analytics Integrates

The architecture of ILAP Analytics ensures seamless integration with your existing IT infrastructure while maintaining security and scalability. The image above illustrates:

1. User Authentication:
   Users access the ILAP Analytics interface through a web client (SPA), authenticating via Microsoft Entra ID. Authentication tokens are used to verify access rights to data and features.
   
   

2. Resource Management:
   Azure resources, including App Services and SQL databases, store, process, and deliver schedule-related data. These resources are managed through Bicep templates to ensure consistent deployment.
   
   

3. Secure Data Handling:
   Sensitive data and application secrets are stored in Azure Key Vault, ensuring compliance with corporate security policies.
   
   

4. Data Processing:
   Background jobs and APIs handle metrics generation, data processing, and reporting, facilitating efficient resource utilization.
   
   

5. Extensibility:
   The architecture allows for additional resources like Virtual Networks, Web Application Firewalls, or Private Network Endpoints to enhance security and tailor deployments to specific corporate needs.

Installation Instructions for ILAP Analytics

The following sections guide you through the step-by-step process of installing and deploying ILAP Analytics in your Azure environment. Each step is designed to ensure a smooth and secure deployment, tailored to meet corporate IT standards.

1. Prerequisites for Installing in Azure

   • Outlines the required permissions, custom domain setup, and SSL certificates necessary to prepare your Azure environment for ILAP Analytics.
     
     

2. Configuring Application Registrations

   • Details how to register the UI and API applications in Microsoft Entra ID for authentication and authorization.
     
     

3. Configuring Bicep Parameters

   • Explains how to prepare the Bicep parameter file with essential values, such as tenant IDs, client IDs, and custom domains, to deploy Azure resources.
     
     

4. Deploy Azure Resources

   • Provides instructions for deploying critical infrastructure, including App Services and SQL databases, using the Bicep parameter file.
     
     

5. Deploy and Install ILAP Analytics Applications

   • Describes the process of deploying the API, Background Jobs, and UI applications, including publishing artifacts and setting up configurations.
     
     

6. Protect Installed Resources
   

Disclaimer

This guide does not include instructions for securing Azure resources beyond their functional deployment. You are responsible for implementing additional security measures in accordance with corporate policies, which may include:

• Web Application Firewall (WAF)
  
  

• Application Gateway
  
  

• Virtual and Private Networks
  
  

• Monitoring via Azure Monitor, Application Insights, or Microsoft Sentinel

Conclusion

ILAP Analytics is a scalable, secure, and efficient platform for managing schedule data in a corporate Azure environment. By leveraging the provided architecture, you can deploy the solution while ensuring seamless integration with your existing IT systems. Remember to implement additional security measures to comply with your organization’s information security standards.