New Customer

Introduction

This document guides you on how to install ILAP Analytics and register it as an application in your corporate Azure Subscription. ILAP Analytics runs in a corporate Azure environment, using Microsoft Entra ID for authentication and application roles for authorization. It provides project planners and analysts with tools to manage schedules, track changes, and gain actionable insights, while integrating into your existing IT ecosystem.

Disclaimer

This document describes installation of functional Azure resources only, no further protection of the resources is provided and it is up to you as an IT professional to add protection of these resources so that you follow your corporate guidelines. This may include but is not limited to:

1. Web application firewall
2. Application Gateway
3. Virtual Network
4. Private Network endpoints
5. Application Insights
6. Azure Monitor
7. Microsoft Sentinel
8. ...

Overview

ILAP Analytics is software intended to be installed in Corporate Azure and uses Entra ID for authentication and application roles for authorization. The figure below shows an overview of the required Azure resources excluding any additional resources you wish to add for added information security.

How ILAP Analytics integrates

The architecture integrates with your existing IT infrastructure while maintaining security and scalability. The figure above illustrates:

1. User authentication: Users access the ILAP Analytics interface through a web client (SPA), authenticating via Microsoft Entra ID. Authentication tokens verify access rights to data and features.
2. Resource management: Azure resources, including App Services and SQL databases, store, process, and deliver schedule-related data. These resources are managed through Bicep templates for consistent deployment.
3. Secure data handling: Sensitive data and application secrets are stored in Azure Key Vault, ensuring compliance with corporate security policies.
4. Data processing: Background jobs and APIs handle metrics generation, data processing, and reporting for efficient resource utilization.
5. Extensibility: The architecture allows additional resources such as Virtual Networks, Web Application Firewalls, or Private Network Endpoints to enhance security and tailor deployments to your corporate needs.

ILAP Analytics in Corporate Azure Subscription

Corporate Entra ID

Authentication and authorization

ILAP Analytics uses Microsoft Entra ID for secure authentication and authorization:

• App Registrations define how the UI and API components authenticate users.
• Enterprise Applications enable role-based access control (RBAC) for users and administrators.
• Azure Key Vault stores the SSL certificate securely to protect the application's endpoints.

Installation Instructions

Start with the Installation Overview — it explains what will be installed and why, the app registrations, and every permission the installation requires (useful when duties are split across teams). Then work through the steps below in order.

1. Prerequisites for installing at customer's Azure — the permissions, custom domain, and SSL certificate needed to prepare your Azure environment.
2. Application registrations — register the UI and API applications in Microsoft Entra ID for authentication and authorization.
3. Configure bicep parameters — prepare the Bicep parameter file with values such as tenant IDs, client IDs, and custom domains.
4. Deploy Azure Resources — deploy the infrastructure (App Services, SQL databases) using the Bicep parameter file.
5. Install IlapAnalytics — deploy the API, Background Jobs, and UI applications.
6. Protect the installed resources in accordance with your corporate standards.

Next steps

Once the applications are deployed, continue with the IA Documentation section, which covers operating and verifying your installation:

1. Checklist after deployment — verify the API, background jobs, GraphQL, web UI, and time-phasing are all healthy.
2. Securing ILAP Analytics — apply the network- and access-level hardening required by your corporate standards.
3. User Permissions — assign the Reader, Writer, and Administrator roles to your users.

Conclusion

ILAP Analytics is a scalable and secure platform for managing schedule data in a corporate Azure environment. Once deployed, remember to add the security measures required by your organization's information security standards (see the disclaimer above).