Die SharePoint Infrastruktur der Zukun4: Cloud, mobile und professioneller Governance Herausforderungen und prakbsche Erfahrung. Marek Czarzbon, Made In Point GmbH
Referenz 1: Bank (5000++) For a bank we have evaluated the possibility to use cloud only Big internal drive from the management to use office 365 and Citrix (reverse proxy) Problems: Backup of data, A copy of the data in the bank, migrakon Kme, Cryptography of data of the server but not if sending to the customer NO GO: audikng of data center BUT: It could change over the Kme à cloud ready solukon
Referenz 2: InternaKonales Chemie- Konzern (40.000++) Zusammenarbeit mit externen Partnern OneDrive: 1 Terabyte an Daten in der Cloud per User. Überall abru^ar, kein VPN notwendig ADFS für Single Sign On auch auf mobilen Geräten - hier ios (ZerKfikat)
Referenz 3: Energie- Konzern (6.000++) Cloud- Ready Phase 1: Publishing Intranet Phase 2: CollaboraKon auch mit externen Partnern
CLOUD OFFICE 365
Landing Page & Provisioning - Hybrid Provisioning On Premises and Cloud On Premises Tenant -Office 365 SharePoint 2013 Provisioning Suite & Landing page COMPANY EXTERNAL
Hybrid: On Premise and Cloud On Premise office 365 High Trust Low Trust Provider Hosted App COMPANY EXTERNAL
The Vision News Portal News Teams Projects News Apps GO Search MySite Host Personal Pages...
DEMO
Structure Organiza,on Units Organize a team Vision: VerKcal borders on the organizakonal unit Vision: Ahribute based Access Management for members (ADFS) Vision: Push relevant informakon to the units broadcast Networks CollaboraKon, Interest but not Kme limited Knowledge Management Cross units, Access Rights managed by Site owners Newsfeed to learn how to use microblog/chat Vision: ConnecKon and IntegraKon of Yammer CommuniKes Projects Collabora,on, Task and Deadline driven Time limited (ALM) Clear Taxonomy for Documents Cross units, Access Rights managed by Site owners Newsfeed to learn how to use microblog/chat Vision: Document Templates Vision: ConnecKon and IntegraKon of Yammer CommuniKes Portal Units Networks Projects Tools
Structure Portals Search driven aggregakon of InformaKon Landing Pages NavigaKon OrganizaKon, Networks, Projects Registry Individual favorites for short click way access Search driven navigakon Tools SharePoint and not SharePoint Tools Web or Rich Client based Metadata based search Central management Individual favorites for short click way access Search driven navigakon Personal (My site) Personal Documents Newsfeed aggregakon Tasks AggregaKon Favorites Portal Units Networks Projects Tools
Is it possible to build whole intranet based only on the new app model? How to provision templates? How to provision MySite How to work with publishing area How to build a portal
Dipl. Inf. Marek Czarzbon marek@madeinpoint.com [Tchashbon] CEO Made In Point GmbH Sooware Architect, ConsulKng SharePoint 2010 Master Candidate Share Point 2013, SharePoint 2010, SharePoint 2007 iphone & ipad UI Share Point User Group Nürnberg à https://www.xing.com/net/spusergroupnbg/
Workshop: Definition of artifacts StaKc Template for Units Networks Projects DefiniKon of content type Column: Source DefiniKon of aggregakon for the portal 17
COMPANY Local navigakon Corporate News Unit hierarchical Unit Blog View 1 View 2
Templates: Static versus dynamic Managed Template (sta,c) One fits all good prackce approach IT Offer SLA Level 1 Learning curve: e.g. working in mulkple projects Responsive design AutomaKc enhancement of funckonality Three groups and single item security Easier Training. Proofed examples. Update of the structure WebPart on the Start- Page E.g. Documents, Tasks, Events with Views News, Global informakon Flexible Feel free but responsible IT Offer only SLA Level 2 Driver License to be able to deliver SLA Level 1 and customizing First Level support by business owner No guarantee for responsive design (web part zones, complex navigakon, JsLink etc) No Update of the structure Add addikon funckonality or separate data in different containers (e.g. 2 Tasks List, Custom List) No automakc enhancement AggregaKng only parts of the standard template and content Types connected to it DocumentaKon by the owner needed Majority Level of the organizakon? 19
Service Level Agreement User AdopKon Costs Support Cost Flexible StaKc FuncKonality
Rights Management StaKc site support only four groups: IT Admins Site Administrator Business Owner Member Visitor Need more? Flexible? Problem: Managed Permission Right MySite Personal Page User Site Administrator User is site owner (custom site owner)
Rights Management Self service provisioning and Landing page Workshop 22
Life Cycle Management
Request Forms with approval workflow New Site Change Service Level Bronze à Silver à Gold Taxonomie (StaKc Template) Add Term Set and allow (or not - global) to manage Archiving Archive the site without waikng for Life Cycle mechanism, with approval DeacKvaKon /AcKvaKon (read only mode) DeacKvate the site without waikng for Life Cycle mechanism, with approval DeleKon Delete the site without waikng for Life Cycle mechanism, with approval no reversible ProlongaKon: Valid unkl Quote Change Owner or Deputy Change Metadata of the site Title, Logo, Thema à User has no rights to manage the site
Request site wizard New site tbd
Lifecycle ExpiraKon date with nokficakon AutomaKc process if user is not reackng to the nokficakon MulKlevel reackon NoKficaKon Read only page ( skll searchable) DeacKvate the page skll in SharePoint but searchable only in special Archive area No aggregakon in the landing page Unfollow the page for all users Remove from favorites? Possibility to undo? Paying? Delete Page Removed from SharePoint Access only over backup (cloud?) Export of data? Paying? Archiving of a site DeacKvaKon Delete of a site What about flexible sites? When do you stop to pay.
Site Template Provisioning
Site Template Provisioning In the SharePoint Online it is not possible to add declarakve Site Templates The only way: create a blank site and then AcKvate/deacKvate features Add Content Types Add Lists/Libs Add Apps Add WebParts/AppParts Change Look and Feel Configure Search Change DisplayTemplate etc
Responsive Design NEWS START MADEINPOINT HEADER NEWS START
Not all funckon are available over CSOM Hack: send a HTTP form idenkcal to the form from SharePoint using.net WebClient.UploadValues E.g. AudiKng Manipulate the PropertyBag directly: for example to change the DocumentID Sewngs or Search sewngs.
Site naming On Premise Units hhps://sharepoint.madeinpoint.com/u/100/home hhps://sharepoint.madeinpoint.com/u/100/home Cloud: hhps://madeinpoint.sharepoint.com/sites/u- 100/home hhps://madeinpoint.sharepoint.com/sites/p- 101/home hhps://madeinpoint.sharepoint.com/sites/n- 102/home Projects hhps://sharepoint.madeinpoint.com/p/100/home hhps://sharepoint.madeinpoint.com/p/101/home Networks hhps://sharepoint.madeinpoint.com/n/100/home hhps://sharepoint.madeinpoint.com/n/101/home Custom Apps hhps://sharepoint.madeinpoint.com/c/100/home hhps://sharepoint.madeinpoint.com/c/101/home
Registry New- MPSite - OrganizaKon - AppUrl "hhps://mpintranet.madeinpoint.com" - Title "Markt & InnovaKon" - TermId bd9cd7e3- e690-4a79-9781- 557530239a35 - Template OrganisaKonen - Verbose - OwnerLogin mip/user" - DeputyLogin mip\user2 $response = Invoke- WebRequest - Uri $url - TimeoutSec 1800 - UseDefaultCredenKal - Body $body if ($response - ne $null) { Write- Host "ApplicaKon returned result:" $response Select- Object StatusCode, StatusDescripKon, Content Format- List } }
MySite Provisioning How it works in standards? How to get the user context to access and change the data? How to connect MySite Host and Personal Content in more smooth way?
Pre provisioning - 2013 "SPSPERS#3 - Follow FuncKonality & Co
Change the Personal Site $updatetositeversion = "1.0.0.1" $web = get- SPWeb($personProfile.PersonalUrl.AbsoluteUri) $url = "hhps://mpintranet.madeinpoint.com/$updatetositeversion/setuppersonalsite" $body = @{ SPHostUrl = $mysiteurl userlogin = $personprofile.accountname } try { $response = Invoke- WebRequest - Uri $url - TimeoutSec 1800 - UseDefaultCredenKal - Body $body - Verbose
Infrastruktur
ProducKve System Dir Sync MS Online Services ADFS 3 hhps://login.microsooonline.com Load Balancer IP: dynamic Trust 3 hhps://login.madeinpoint.com Public SSL Cert: login.madeinpoint.com hhps://login.madeinpoint.com Public SSL Cert: login.madeinpoint.com Load Balancer IP: x.x.x.x AD Dir Sync Server External User (no 1 madeinpoint User ID) 4 2 2 1 User ACS - Low Trust Provider Hosted App Hybrid Search Create Site in office 365 - Client Secret Show madeinpoint On- Premises NavigaKon, Favorites in Cloud External User Access On- Premises Scenarios 5 6 6 4 hhps://madeinpoint.sharepoint.com Load Balancer IP: dynamic hhps://spss.app.madeinpoint.com Public SSL Cert: *.app.madeinpoint.com hhps://spss.app.madeinpoint.com madeinpoint SSL Cert: spss.app.madeinpoint.com *.app.madeinpoint.com Load Balancer IP: 10.180.113.207 Office 365 Tenant (madeinpoint) Cloud Reverse Proxy (WAP) S2S High Trust User Profile Sync hhps://xxx.madeinpoint.com Load Balancer IP: x.x.x.x No exposed now! hhps://sharepoint.madeinpoint.com SharePoint 2013 On- Premise hhps://sharepoint.madeinpoint.com hhps://my.madeinpoint.com hhps://search.madeinpoint.com hhps://ca- prod.clarinat.com:8080 madeinpoint SLL Cert: *.sharepoint.madeinpoint.com sharepoint.madeinpoint.com my.madeinpoint.com search.madeinpoint.com solukons.madeinpoint.com ca- prod.madeinpoint.com Load Balancer IP: x.x.x.x
Search
License Management
On- Demand cloud License Management MS Online Services 3 Office 365 Tenant Cloud 1 2 Get User iden,ty by UserID Reverse Proxy (WAP) 2 cloudlicenceahribute = ajribiute58 Bool ackvelicence = getadahribute(cloudlicenceahribute ) If (ackvelicence) { ackvatelicenece( currentuser) } Dir Sync AD 1 Dir Sync Server Add Users to SharePoint group (member, visitor) in the cloud Request and create new site in the cloud <Remote Event Receiver> SPEventReceiverType.GroupUserAdded Provider Hosted App 3 3a If( cloud == true ) { cloudlicenceahribute = ajribute58 setadflag( siteadministrator, cloudlicenceahribute, true) setadflag( siteadministratordeputy, cloudlicenceahribute, true) } Synchroniza,on Every 3h 3b User 1 createsite( properkes ) 2 Request New Site Wizard
Access to the site without ackve SharePoint license
Access to the site without ackve SharePoint license See all arkfacts (List, Libraries, items ) Can add and modify arkfacts according to the rights Works with site with and without external users allowed
Master Site CustomizaKon Cloud go or no go?
QuesKons?