SOLVED Can SCCM 2012 work in multi tenant model

[Aloukik Vibhav]

Hi,
Can I create a public cloud to support application deployment for multiple customers using SCCM 2012 R2, using intune or Orchestrator services or otherwise.

regards,
Aloukik

 

[Prajwal Desai]

Hi, are you referring to this -
http://channel9.msdn.com/series/Tec...ice-Provider-Cloud-with-System-Center-2012-R2

 

[Prajwal Desai]

@Aloukik - Did that link help you ?

 

[Aloukik Vibhav]

Hi Prajwal.. Any knowledge is always helpful. However the use case here is specific to SCCM 2012 and application deployment feature of it. My question is not specific only to System center suite's capability. I understand that Cloud capabilities of System center 2012 are best utilized using SCVMM which provides ability to provision a VM on request to the tenants. This is where the video you shared comes handy. This feature is an extension of IAAS services. Using tools like Service Provider Foundation, we can also provide access to end users who are enabled through private cloud, to create a VM on demand using a pre-defined set of templates. Even the Administration and management of the VMs are possible through a web based interface.


“Service Provider Foundation is provided with Microsoft System Center 2012 - Orchestrator, a component of Microsoft System Center 2012 Service Pack 1 (SP1). Service Provider Foundation exposes an extensible Open Data Protocol (OData) API over a Representational State Transfer (REST) web service that interacts with components of System Center. This enables service providers and large enterprise organizations to design and implement multi-tenant self-service portals that integrate IaaS capabilities available through Microsoft System Center 2012 SP1.”


Now coming to the use case in hand i.e. to be able to deploy applications to tenants using Service provider hosted SCCM 2012 R2, I now understand and have validated with Microsoft folks as well that it is a possible solution however with its own limitations and challenges (keeping aside the compliance implications which I am not aware of at this time). SP (service provider) can host the primary in their network and site servers (MPs/DPs) hosted at customer’s physical location and on their network.


In scenarios where SP is hosting the DNS/DHCP for customers and assigning ip addresses, it may still be manageable. However it is not ideal as customers would like to manage their own DNS and DHCP just like AD DS. As a result SPs might end up with multiple customers with same set of I.P addresses like 10.0.0.x. SPs may have challenges defining boundaries/boundary group for same IP range or subnet for each customer because SCCM does not allow having two boundaries with same IP range or Subnet. Also, since usually there is a one way trust, SP would not get the option to view customer's AD sites and services.