Microsoft IT created a self-service portal that allows employees to retrieve a BitLocker recovery key without a lengthy call to Helpdesk. Then we used Azure Active Directory Application Proxy to extend the portal to a web app for our remote employees.