LSO: Instructor Portal for external instructors

Question

Hi,
I would love to know, what your experience with this scenario is;
Instructors are 3rd party and need to access the instructor portal from outside the organisation's firewall. The HCM system, of course, is on the other side of the firewall, so not accessible for the instructor.
So, we'd need to set up the LSO or part of it outside the firewall and replicate the necessary data from the core system to this one.
Ideally, instructors should be able to
- see courses and delegates
- communicate w learners in a collaboration room
- upload material to share with learners
- capture delegate assessments
- see course assessments
How do you manage the requirement to have some data outside the firewall, but as much as possible behind it?
What are the tech options you use/considered to provide instructor access whilst guranteeing highest possible security?
You may not use this scenario, but have similar challenges with access for external delegates.
Any ideas and exlerience will be appreciated.
Regards
Sven

Answer 1

Since you are asking, I myself would not feel comfortable exposing the services externally. Mainly because your "clone" system will have sensitive data and the services being exposed are part of the HR module. Although I'm not an advocate for Cloud based systems, this and also some other LSO topics are where the SAP on Premise solution really lacks behind. I'm sure there are plenty of implementations out there similar to what you are planning but that doesn't mean it's a best practice. Theoretically as long as your infrastructure is safe (firewalls, reverse proxies, SAP solutions up to date on security and properly configured, etc.), I guess you would be able implement it. I myself would look at other options (custom implementation of the required external services, mix of Cloud and on Premise, etc.).