Web infrastructure project for managing SCS4ALL's web presence with SAML-based identity service
This was a large infrastructure project for managing SCS4ALL's web presence. I developed a web interface for auto provisioning web applications and containers to the SCS4ALL website collection, as well as a SAML-based identity service with role-based access control.
Challenge
SCS4ALL, the student-run organization at Carnegie Mellon's School of Computer Science, had a complex web infrastructure that was difficult for student members to manage. Multiple web applications needed centralized authentication, provisioning, and management.
Solution
I architected and built UnityAPI, a comprehensive platform that provided:
Automated web application provisioning
Container orchestration and deployment
SAML-based Single Sign-On (SSO) system
Role-based access control (RBAC)
Integration with Active Directory Federation Services (ADFS)
LDAP directory integration
Impact
This platform significantly reduced the operational burden on student administrators and enabled SCS4ALL to scale their web infrastructure safely and securely. The centralized identity system improved security posture and user experience across all affiliated websites.
Design principles
Built with student administrators in mind—the interface prioritized ease of use and clear feedback. Implemented security best practices to protect sensitive credentials and access controls.
Impact
Enabled SCS4ALL to scale their web presence from a handful of sites to a managed portfolio of applications serving hundreds of students.
← Back to all work