Ensure digital operational capability with Nubus for Business Continuity – sovereign IAM in standby mode.

Learn more
Identity & Access Management for Schools.

UCS@school - Central School IT that Noticeably Relieves the Burden on Schools

  • Manage users and access automatically
  • Less administrative effort for school authorities
  • More time for teaching at schools
The Challenges

When School IT Has to Keep Pace with the Demands of Digitalization

School authorities are under high pressure to change: growing demands from schools, new applications, rising user numbers, and a high need for security and data protection meet structures that have evolved over time and distributed responsibilities at the schools. What is missing is centralized control that consistently brings together identities, applications, and access – significantly reducing the effort of individual administrations.

High Effort in Supporting School IT

School authorities manage identities, systems, and processes across many schools. Every school works differently, and administration happens locally. This leads to high coordination effort and unnecessary complexity in support.

Hurdles in Providing Applications

New applications are often rolled out manually or via vendor solutions. This creates dependencies, long provisioning times, inconsistent IT structures, as well as security gaps and data protection problems at the individual schools.

Complex Access to Apps And IT Services

Password problems and a lack of centralized access lead to support effort, cost valuable teaching time, and reduce trust in the smooth use of IT in the classroom.

Redundant Maintenance of User Data

User information is maintained separately in each application. This leads to duplicate work and high susceptibility to errors – especially at the school year change, this creates additional, avoidable effort.
From User Management to the First Login

How UCS@school Works

UCS@school automates the entire lifecycle of school identities – from data import to access to all applications. For school authorities, this means: fewer manual processes and a smooth workflow across all schools.

1
Import
2
Integrations
3
Self Services
Step 1 of 3

Manage Users and Rights Centrally

Data from school administration programs is imported automatically, and all users are then managed centrally in Identity & Access Management (IAM).

Automated import via the import tool or via interfaces to additional source systems

Central management of teachers, students, and other users

Roles and permissions pre-configured precisely for use in schools

Step 2 of 3

Connect School and Cloud Services Easily

School software and external cloud services can be integrated centrally and efficiently.

Roles, class, and group memberships are automatically taken into account

Connection via ready-made integration packages from the Integration Catalog

Alternatively via the ID Broker or via open interfaces

Step 3 of 3

Use All Services Through a Central School Portal

Teachers as well as students access all provided applications and services according to their permissions.

From integrated learning platforms or timetable schedulers to computer and Wi-Fi management

Practical self-services in the clearly arranged school portal, for example for password reset

Thanks to Single Sign-on, a single login for all integrated applications – without managing numerous logins and passwords

1
Import
2
Integrations
3
Self Services
Step 1 of 3

Manage Users and Rights Centrally

Data from school administration programs is imported automatically, and all users are then managed centrally in Identity & Access Management (IAM).

Automated import via the import tool or via interfaces to additional source systems

Central management of teachers, students, and other users

Roles and permissions pre-configured precisely for use in schools

1
Import
2
Integrations
3
Self Services
Step 2 of 3

Connect School and Cloud Services Easily

School software and external cloud services can be integrated centrally and efficiently.

Roles, class, and group memberships are automatically taken into account

Connection via ready-made integration packages from the Integration Catalog

Alternatively via the ID Broker or via open interfaces

1
Import
2
Integrations
3
Self Services
Step 3 of 3

Use All Services Through a Central School Portal

Teachers as well as students access all provided applications and services according to their permissions.

From integrated learning platforms or timetable schedulers to computer and Wi-Fi management

Practical self-services in the clearly arranged school portal, for example for password reset

Thanks to Single Sign-on, a single login for all integrated applications – without managing numerous logins and passwords

The added value at a glance

Less Effort. More Impact for Your School IT.

UCS@school reduces manual effort, creates clear structures, and enables the secure operation of school IT, scalable across all schools.

Centralized

Less Effort in IT Operation

Automated processes and central control significantly reduce manual effort in school IT operation.

Relief

Relief For Support and Users

Assemble your IT landscape modularly – tailored to your requirements and your budget.

Flexible

Assemble The Right School IT Yourself

Build your IT landscape in a modular way, tailored to your requirements and budget.

Before & After

School IT With and Without UCS@school

Without a central platform, schools and school authorities work with distributed systems, manual processes, and different structures. With UCS@school, central school IT is created that can be flexibly adapted to different schools. The practical school portal serves as the central starting point for everyday digital school life.

Before

Decentralized and Manual School IT

  • Identities are maintained manually in various applications
  • High support effort for the school authority due to many individual systems
  • Heterogeneous IT structures: every school works with its own solutions
  • Fragmented use of digital applications in the classroom
  • Multiple logins, different accounts, and credentials per application
  • Loss of teaching time due to complex digital access

After

Central and Automated School IT

  • Centralized management of all identities and access rights
  • Significantly reduced support and administration effort for the school authority
  • Unified IT structure with individual design at the schools
  • Easy integration and provisioning of applications
  • Centralized login for all applications (Single Sign-on)
  • More time for teaching, learning, and pedagogical work
The Technology Behind It

The Central Solution for Identities and Applications.

  • Manage Users Centrally

    Users, groups, and permissions are managed in one central place and provided consistently for all systems.

  • Roles for Schools

    Pre-configured role and permission models map typical school structures directly.

  • Open Interfaces & Open Source

    Via the REST API, school administration systems or other source systems, administrative processes, and existing applications can be integrated easily.

  • Flexible Administration

    Manage identities via the web interface or the command line, automate processes via script, or integrate your own workflows.

  • Connect Applications

    Numerous integration packages enable the quick connection of learning platforms, cloud services, and specialized applications.

  • Digital Sovereignty

    Full control over identities, data, and IT structures through open standards and a flexible, independent system architecture.

Roles & Permissions
Integrations

Already Prepared for Your Digital School Environment

UCS@school can be connected with numerous school apps, learning platforms, cloud services, and specialized applications. Many integrations are already available pre-configured and can be used without elaborate in-house development in our App Center Catalog.

Selection of pre-configured applications

The School Portal

One Login for All Applications. Individual for Every School.

With a single login, you securely access all approved applications and IT services. Content, applications, and design can be individually adapted to the requirements of each school and each school authority.

Practical Examples

Roles & permissions

Map and Administer School Structures Easily.

UCS@school maps school structures directly in the system and uses a role-based permission model that makes administration delegable and transparent. With predefined standard roles suited to everyday school life, assigned to classes, groups, or courses.

Students

Automatically created and assigned to the class. Access to relevant applications, GDPR-compliant and self-service.

Teacher

Access to classes, groups, courses, and applications. Quick and easy password reset for students.

School Admin

Manages users, roles, and permissions exclusively within their own school.

Legal Guardians

Their own secure access for communication and school-relevant information. Linked to one or more students.

School Authority Admin

From setting up the schools to integrating applications. Everything managed and maintained centrally.
References

In Use at School Authorities.

UCS@school is in productive use in the education sector – municipal, statewide, and via central data center infrastructures. Practice shows how central school IT, digital sovereignty, and modern administrative structures can be successfully combined.

City of Cologne

  • 261
    Schools
  • 145.000
    Identities
  • GPDR
    compliant

1. Problem

  • Heterogeneous IT, manual effort
  • User maintenance manual and error-prone
  • Cloud services barely GDPR-compliant

2. Solution

  • UCS@school as a central platform
  • Automated import from SchILDzentral
  • Cloud apps GDPR-compliant via ID Broker

3. Benefit

  • Centralized, relieved, scalable
  • Unified IT for all schools
  • Reduced administrative effort
The city council called for a restriction to open source, and that already ruled out some systems. Fortunately, Univention’s UCS@school is open source and offers the option to integrate many packages.
With UCS@school, we have created the foundation for a school IT that we can shape ourselves and develop flexibly. The open architecture, the central user management, and the connection of external systems make the system the ideal solution for us – also with a view to future requirements.
With UCS@school, we have found an IT solution for Flensburg’s schools that is modern, reliable, and convenient to use, and that makes our school IT fit for the future.
FAQ

Frequently Asked Questions About UCS@school

Answers to the most important questions about UCS@school as a central solution for school IT & identity and access management.

UCS@school is an Identity & Access Management (IAM) specifically for the education sector. The solution for central school IT brings together users, roles, and applications in one place. The goal is to manage identities consistently across their entire lifecycle and to significantly simplify IT operation at schools.

The solution is primarily aimed at school authorities, municipal IT service providers, data centers, and educational institutions that want to centralize and standardize their school IT – forward-looking, sovereign, and secure.

In contrast to isolated solutions, UCS@school combines identity management, applications, and access control in one integrated platform. This reduces manual effort and duplicate maintenance processes – while at the same time providing significantly more transparency in operation.

Users, groups, and roles are maintained centrally in Identity & Access Management. Pre-configured role models for schools ensure that permissions can be assigned directly to match typical school requirements.

Yes. The solution is designed to map different school types and administrative structures – from individual schools to complex school authority landscapes to use as a statewide solution.

UCS@school supports the integration of learning platforms, specialized applications, and cloud services via open standards, ready-made integration packages, as well as the ID Broker and the Integration Catalog.

The platform is designed for use in the education sector and supports established security and data protection requirements. Access rights are clearly structured and can be controlled centrally.

The costs depend on size, requirements, and operating model. From small pilot projects to large-scale school authority structures, different models are possible.