Die SharePoint Infrastruktur der Zukun4: Cloud, mobile und professioneller Governance Herausforderungen und prakbsche Erfahrung.

Transcription

1 Die SharePoint Infrastruktur der Zukun4: Cloud, mobile und professioneller Governance Herausforderungen und prakbsche Erfahrung. Marek Czarzbon, Made In Point GmbH

2 Referenz 1: Bank (5000++) For a bank we have evaluated the possibility to use cloud only Big internal drive from the management to use office 365 and Citrix (reverse proxy) Problems: Backup of data, A copy of the data in the bank, migrakon Kme, Cryptography of data of the server but not if sending to the customer NO GO: audikng of data center BUT: It could change over the Kme à cloud ready solukon

3 Referenz 2: InternaKonales Chemie- Konzern ( ) Zusammenarbeit mit externen Partnern OneDrive: 1 Terabyte an Daten in der Cloud per User. Überall abru^ar, kein VPN notwendig ADFS für Single Sign On auch auf mobilen Geräten - hier ios (ZerKfikat)

4 Referenz 3: Energie- Konzern ( ) Cloud- Ready Phase 1: Publishing Intranet Phase 2: CollaboraKon auch mit externen Partnern

5 CLOUD OFFICE 365

6

7 Landing Page & Provisioning - Hybrid Provisioning On Premises and Cloud On Premises Tenant -Office 365 SharePoint 2013 Provisioning Suite & Landing page COMPANY EXTERNAL

8 Hybrid: On Premise and Cloud On Premise office 365 High Trust Low Trust Provider Hosted App COMPANY EXTERNAL

9 The Vision News Portal News Teams Projects News Apps GO Search MySite Host Personal Pages...

10 DEMO

11 Structure Organiza,on Units Organize a team Vision: VerKcal borders on the organizakonal unit Vision: Ahribute based Access Management for members (ADFS) Vision: Push relevant informakon to the units broadcast Networks CollaboraKon, Interest but not Kme limited Knowledge Management Cross units, Access Rights managed by Site owners Newsfeed to learn how to use microblog/chat Vision: ConnecKon and IntegraKon of Yammer CommuniKes Projects Collabora,on, Task and Deadline driven Time limited (ALM) Clear Taxonomy for Documents Cross units, Access Rights managed by Site owners Newsfeed to learn how to use microblog/chat Vision: Document Templates Vision: ConnecKon and IntegraKon of Yammer CommuniKes Portal Units Networks Projects Tools

12 Structure Portals Search driven aggregakon of InformaKon Landing Pages NavigaKon OrganizaKon, Networks, Projects Registry Individual favorites for short click way access Search driven navigakon Tools SharePoint and not SharePoint Tools Web or Rich Client based Metadata based search Central management Individual favorites for short click way access Search driven navigakon Personal (My site) Personal Documents Newsfeed aggregakon Tasks AggregaKon Favorites Portal Units Networks Projects Tools

13 Is it possible to build whole intranet based only on the new app model? How to provision templates? How to provision MySite How to work with publishing area How to build a portal

14

15

16 Dipl. Inf. Marek Czarzbon [Tchashbon] CEO Made In Point GmbH Sooware Architect, ConsulKng SharePoint 2010 Master Candidate Share Point 2013, SharePoint 2010, SharePoint 2007 iphone & ipad UI Share Point User Group Nürnberg à

17 Workshop: Definition of artifacts StaKc Template for Units Networks Projects DefiniKon of content type Column: Source DefiniKon of aggregakon for the portal 17

18 COMPANY Local navigakon Corporate News Unit hierarchical Unit Blog View 1 View 2

19 Templates: Static versus dynamic Managed Template (sta,c) One fits all good prackce approach IT Offer SLA Level 1 Learning curve: e.g. working in mulkple projects Responsive design AutomaKc enhancement of funckonality Three groups and single item security Easier Training. Proofed examples. Update of the structure WebPart on the Start- Page E.g. Documents, Tasks, Events with Views News, Global informakon Flexible Feel free but responsible IT Offer only SLA Level 2 Driver License to be able to deliver SLA Level 1 and customizing First Level support by business owner No guarantee for responsive design (web part zones, complex navigakon, JsLink etc) No Update of the structure Add addikon funckonality or separate data in different containers (e.g. 2 Tasks List, Custom List) No automakc enhancement AggregaKng only parts of the standard template and content Types connected to it DocumentaKon by the owner needed Majority Level of the organizakon? 19

20 Service Level Agreement User AdopKon Costs Support Cost Flexible StaKc FuncKonality

21 Rights Management StaKc site support only four groups: IT Admins Site Administrator Business Owner Member Visitor Need more? Flexible? Problem: Managed Permission Right MySite Personal Page User Site Administrator User is site owner (custom site owner)

22 Rights Management Self service provisioning and Landing page Workshop 22

23 Life Cycle Management

24 Request Forms with approval workflow New Site Change Service Level Bronze à Silver à Gold Taxonomie (StaKc Template) Add Term Set and allow (or not - global) to manage Archiving Archive the site without waikng for Life Cycle mechanism, with approval DeacKvaKon /AcKvaKon (read only mode) DeacKvate the site without waikng for Life Cycle mechanism, with approval DeleKon Delete the site without waikng for Life Cycle mechanism, with approval no reversible ProlongaKon: Valid unkl Quote Change Owner or Deputy Change Metadata of the site Title, Logo, Thema à User has no rights to manage the site

25 Request site wizard New site tbd

26

27 Lifecycle ExpiraKon date with nokficakon AutomaKc process if user is not reackng to the nokficakon MulKlevel reackon NoKficaKon Read only page ( skll searchable) DeacKvate the page skll in SharePoint but searchable only in special Archive area No aggregakon in the landing page Unfollow the page for all users Remove from favorites? Possibility to undo? Paying? Delete Page Removed from SharePoint Access only over backup (cloud?) Export of data? Paying? Archiving of a site DeacKvaKon Delete of a site What about flexible sites? When do you stop to pay.

28 Site Template Provisioning

29 Site Template Provisioning In the SharePoint Online it is not possible to add declarakve Site Templates The only way: create a blank site and then AcKvate/deacKvate features Add Content Types Add Lists/Libs Add Apps Add WebParts/AppParts Change Look and Feel Configure Search Change DisplayTemplate etc

30

31 Responsive Design NEWS START MADEINPOINT HEADER NEWS START

32 Not all funckon are available over CSOM Hack: send a HTTP form idenkcal to the form from SharePoint using.net WebClient.UploadValues E.g. AudiKng Manipulate the PropertyBag directly: for example to change the DocumentID Sewngs or Search sewngs.

33 Site naming On Premise Units hhps://sharepoint.madeinpoint.com/u/100/home hhps://sharepoint.madeinpoint.com/u/100/home Cloud: hhps://madeinpoint.sharepoint.com/sites/u- 100/home hhps://madeinpoint.sharepoint.com/sites/p- 101/home hhps://madeinpoint.sharepoint.com/sites/n- 102/home Projects hhps://sharepoint.madeinpoint.com/p/100/home hhps://sharepoint.madeinpoint.com/p/101/home Networks hhps://sharepoint.madeinpoint.com/n/100/home hhps://sharepoint.madeinpoint.com/n/101/home Custom Apps hhps://sharepoint.madeinpoint.com/c/100/home hhps://sharepoint.madeinpoint.com/c/101/home

34 Registry New- MPSite - OrganizaKon - AppUrl "hhps://mpintranet.madeinpoint.com" - Title "Markt & InnovaKon" - TermId bd9cd7e3- e690-4a a35 - Template OrganisaKonen - Verbose - OwnerLogin mip/user" - DeputyLogin mip\user2 $response = Invoke- WebRequest - Uri $url - TimeoutSec UseDefaultCredenKal - Body $body if ($response - ne $null) { Write- Host "ApplicaKon returned result:" $response Select- Object StatusCode, StatusDescripKon, Content Format- List } }

35

36 MySite Provisioning How it works in standards? How to get the user context to access and change the data? How to connect MySite Host and Personal Content in more smooth way?

37 Pre provisioning "SPSPERS#3 - Follow FuncKonality & Co

38 Change the Personal Site $updatetositeversion = " " $web = get- SPWeb($personProfile.PersonalUrl.AbsoluteUri) $url = "hhps://mpintranet.madeinpoint.com/$updatetositeversion/setuppersonalsite" $body SPHostUrl = $mysiteurl userlogin = $personprofile.accountname } try { $response = Invoke- WebRequest - Uri $url - TimeoutSec UseDefaultCredenKal - Body $body - Verbose

39 Infrastruktur

40

41 ProducKve System Dir Sync MS Online Services ADFS 3 hhps://login.microsooonline.com Load Balancer IP: dynamic Trust 3 hhps://login.madeinpoint.com Public SSL Cert: login.madeinpoint.com hhps://login.madeinpoint.com Public SSL Cert: login.madeinpoint.com Load Balancer IP: x.x.x.x AD Dir Sync Server External User (no 1 madeinpoint User ID) User ACS - Low Trust Provider Hosted App Hybrid Search Create Site in office Client Secret Show madeinpoint On- Premises NavigaKon, Favorites in Cloud External User Access On- Premises Scenarios hhps://madeinpoint.sharepoint.com Load Balancer IP: dynamic hhps://spss.app.madeinpoint.com Public SSL Cert: *.app.madeinpoint.com hhps://spss.app.madeinpoint.com madeinpoint SSL Cert: spss.app.madeinpoint.com *.app.madeinpoint.com Load Balancer IP: Office 365 Tenant (madeinpoint) Cloud Reverse Proxy (WAP) S2S High Trust User Profile Sync hhps://xxx.madeinpoint.com Load Balancer IP: x.x.x.x No exposed now! hhps://sharepoint.madeinpoint.com SharePoint 2013 On- Premise hhps://sharepoint.madeinpoint.com hhps://my.madeinpoint.com hhps://search.madeinpoint.com hhps://ca- prod.clarinat.com:8080 madeinpoint SLL Cert: *.sharepoint.madeinpoint.com sharepoint.madeinpoint.com my.madeinpoint.com search.madeinpoint.com solukons.madeinpoint.com ca- prod.madeinpoint.com Load Balancer IP: x.x.x.x

42 Search

43 License Management

44 On- Demand cloud License Management MS Online Services 3 Office 365 Tenant Cloud 1 2 Get User iden,ty by UserID Reverse Proxy (WAP) 2 cloudlicenceahribute = ajribiute58 Bool ackvelicence = getadahribute(cloudlicenceahribute ) If (ackvelicence) { ackvatelicenece( currentuser) } Dir Sync AD 1 Dir Sync Server Add Users to SharePoint group (member, visitor) in the cloud Request and create new site in the cloud <Remote Event Receiver> SPEventReceiverType.GroupUserAdded Provider Hosted App 3 3a If( cloud == true ) { cloudlicenceahribute = ajribute58 setadflag( siteadministrator, cloudlicenceahribute, true) setadflag( siteadministratordeputy, cloudlicenceahribute, true) } Synchroniza,on Every 3h 3b User 1 createsite( properkes ) 2 Request New Site Wizard

45 Access to the site without ackve SharePoint license

46 Access to the site without ackve SharePoint license See all arkfacts (List, Libraries, items ) Can add and modify arkfacts according to the rights Works with site with and without external users allowed

47 Master Site CustomizaKon Cloud go or no go?

48 QuesKons?