About - CaPSE Demo

🎯 Overview

CaPSE Demo is a Firebase-hosted web application that provides unified management of users, devices, applications, and licenses across multiple identity platforms. The application demonstrates enterprise-grade identity management capabilities with intelligent automation, real-time synchronization, and smart resource allocation.

Key Capabilities

Multi-Platform Identity Management: Unified control across Google Workspace, Microsoft Entra ID, Okta, and PingOne
ChromeOS Device Management: Complete device lifecycle management with remote commands
Smart License Management: Dynamic O365 license assignment with automatic user rotation
Application & Policy Control: Group-based access management for applications and security policies
Real-time Sync & Caching: Hourly automated synchronization with Firestore caching for performance

🏗️ Architecture

Frontend (public/)

Modular Single Page Application with feature-specific modules:

main.js: Application orchestrator and authentication state management
account.js: Multi-platform account management and license control
devices.js: ChromeOS device management and remote operations
groups.js: Application and policy group management
kiosk.js: Kiosk application deployment and OU management
auth.js: Firebase Authentication with Google OAuth

Backend (functions/)

Microservices Architecture with specialized modules:

accountManagement/: User account operations across all identity providers + O365 license management
deviceManagement/: ChromeOS device control via Google Admin SDK
groupManagement/: Google Workspace groups and policy management
scheduledSyncs/: Automated hourly synchronization cron jobs
manualSyncs/: On-demand sync operations for immediate updates
cachedData/: Fast read access to Firestore cached data
adminMetrics/: System metrics, health monitoring, and announcements management
auditAnalytics/: BigQuery-powered Workspace audit log analytics and Chrome security monitoring
chatbot/: AI-powered assistant using Gemini 2.5 Pro

✨ Features

🔐 Account Management

Unified Account Status across all platforms
Automated account provisioning
SSO Provider switching via OU management
Universal password reset
Secondary domain support

📄 Smart License Management

Dynamic O365 E3/E1 assignment
Self-service license control
Automatic user rotation
Real-time status display
Group-based assignment

📱 ChromeOS Device Management

Complete device inventory
Remote commands (reboot, wipe, etc.)
OU management
Policy group management
Device claiming by serial number

🎮 Kiosk Management

Dynamic OU creation
Application deployment
Chrome policy integration
Auto-launch configuration

📊 Group-Based Access Control

Application access management
Policy group control
Data protection (CEP) groups
Real-time membership updates

🤖 AI Assistant

Gemini 2.5 Pro integration
Context-aware guidance
Expandable interface
Educational focus
Keyboard shortcuts

📊 BigQuery Analytics

Workspace audit log analytics
Login activity tracking
User behavior analysis
Scalable data processing
Real-time insights

🔐 Chrome Security Dashboard

SIEM-style security monitoring
Risk scoring algorithm
Threat intelligence
Security event classification
User-specific analysis

🔔 Advanced User Experience

Synchronized processing toasts
Dynamic progress indicators
Smart state management
Visual processing feedback
Consistent operation coverage

📢 System Announcements

Admin Control: Simple interface for creating system-wide updates and notices
Smart Display: Collapsible announcements at top of account page
Multi-line Support: First line shows inline with expand arrow for additional content
Auto-hide: Announcements disappear when content is empty
Timestamp Tracking: Shows last updated date and admin who made changes

🔐 Security Features

Service Account Authentication: Secure API access with domain-wide delegation
Firebase Authentication: Google OAuth with domain restrictions
Secret Management: Encrypted credential storage via Firebase secrets
Permission Validation: Function-level authentication and authorization
Audit Logging: Comprehensive operation logging for compliance

📈 Performance Optimizations

Firestore Caching: Reduces API calls with hourly synchronized cache
Parallel Processing: Concurrent API operations for improved response times
Smart Pagination: Efficient data loading for large datasets
Client-side Filtering: Reduces server load and improves Graph API compatibility

🤝 Integration Details

Microsoft Graph API

Smart license Management with dynamic O365 E3 assignment
Group-based licensing with automatic provisioning
Sign-in activity tracking for user rotation
Client-side filtering to avoid OData limitations

Google Admin SDK

Domain-wide delegation with service account impersonation
Comprehensive management of users, devices, groups, and OUs
Chrome Enterprise Premium policy control
Real-time device operations

Multi-Platform Support

Okta SDK: Native API integration for user management
PingOne REST API: Direct API calls with token management
Unified Experience: Consistent UI across all platforms

📋 Recent Updates

Latest - Enhanced User Experience & Admin Tools

✅ System Announcements: Admin-controlled updates with collapsible display on account page
✅ O365 License Removal: Complete license lifecycle management with request/remove functionality
✅ Redesigned License Cards: Clean, spacious layout with vertical button stacking
✅ AI Assistant Integration: Gemini 2.5 Pro powered chatbot with context awareness
✅ Microsoft Graph API Fix: Critical bug fix for proper group membership removal
✅ Admin Dashboard Enhancements: Comprehensive system metrics and health monitoring

v2 - Smart License Management

✅ Dynamic O365 E3 License Assignment: Intelligent allocation with automatic user rotation
✅ Professional License Dashboard: Dedicated licenses section with grid layout
✅ Real-time Status Display: Live license availability and assignment tracking
✅ Microsoft Graph Integration: Robust API handling with fallback strategies

v1 - Multi-Platform Integration

✅ Unified Identity Management: Single interface for Google, Microsoft, Okta, and PingOne
✅ ChromeOS Device Control: Complete device lifecycle management
✅ Application & Policy Management: Group-based access control system
✅ Automated Synchronization: Hourly cache updates with manual override capability