The document discusses planning and configuring extranets in SharePoint 2010. It covers what an extranet is, requirements for extranets including who needs access and how sensitive the data is, and how to configure SharePoint 2010 for extranets using features like claims-based authentication and alternate access mappings. It also provides examples and resources for setting up extranets in SharePoint.

1. Planning and Configuring Extranets in SharePoint 2010 Geoff Varosky Jornata

2. About Me Geoff Varosky Jornata Director, Development & Evangelism Blogger, Speaker BASPUG Co-Founder SPS Boston Co-Organizer Blog : www.sharepointyankee.com Email: geoff.varosky@jornata.com Twitter: @gvaro LinkedIn & Facebook 2 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

3. Agenda Thinking What is an extranet? Requirements SharePoint 2010 Doing Configuration SharePoint Alternate Access Mappings IIS Management 3 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

4. What is an extranet? 4 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

5. What is an extranet? 5 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

6. What is an extranet? Controlled access from external networks 6 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

7. What is an extranet? Controlled access from EXTeRnAlNETworks 7 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

8. Simple Extranet Example 8 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

9. Requirements 9 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

10. Requirements What do you REALLY need? Who needs access? How sensitive is the data? How sensitive is your network? Budget? 10 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

11. Requirements 11 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

12. Requirements Who needs access? Internal employees only? Active Directory Internal employees and external users? Active Directory Additional domain with restricted access Active Directory & Forms Based Authentication Claims Authentication External Clients, partners, consultants Active Directory Forms Based Authentication Separate or together? 12 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

13. Remember this… 13 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro You are giving a key to access your company’s data in some form or another.

14. Requirements 14 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

15. Requirements How sensitive is the data & internal network? Network & SharePoint DMZ Separate web application Separate farm 15 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

16. Requirements How sensitive is the data & internal network? Security Secure Certificates (SSL) Encryption Firewall Both hardware and software? Content Filtering ACLs Virtual Private Network Anti-Virus and Anti-Malware Client-based certificates One-time passwords (RSA tokens) Biometrics Retina, fingerprint, facial structure, hair and blood samples 16 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

17. SharePoint 2010 17 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

18. SharePoint 2010 Versions? Foundation up to Enterprise Server 2010 Claims Based Authentication Forms Based Authentication Office 365? Configuration (and our Demo) Create ASP.NET Membership Database Configure SharePoint Extend Web Application web.config settings Alternate Access Mappings Configure IIS Create and Manage Users 18 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

19. DEMO! 19 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

20. Managing Users IIS Must change default role manager and membership providers each time = DOWNTIME. Separate IIS Virtual Web Application BCS Great way to manage users (passwords, emails, etc.) No ability to create users without another layer of logic Codeplex SharePoint 2010 FBA Pack http://sharepoint2010fba.codeplex.com 3rd Party… DevIt.EU http://www.devit.eu/ 20 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

21. Remember this too… 21 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro Test the configuration Review security regularly

22. Resources My blog series Part 1 : http://go.gvaro.net/ExtranetsP1 Part 2 : http://go.gvaro.net/ExtranetsP2 Part 3 : http://go.gvaro.net/ExtranetsP3 My Virtual Environment via CloudShare SharePoint 2010 Information Worker image Configured just about the same as we did here On the desktop Links to my information Link to Extranet 14 Day Trial Use promo code GEOFF to get first month for $29! http://go.gvaro.net/ExtranetsVM3 22 Thinking SharePoint? Think Jornata. email: gvarosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

23. Resources Visual FBA configuration by Donal Conlon (Jornata) http://go.gvaro.net/oPnAYx Extranet tested topologies for SP 2010 Model http://go.gvaro.net/SP2010ExtTopMod ASP.NET 2.0 Membership Database Reference Create, Add Users, etc. http://go.gvaro.net/AN2Mbr FBA Configuration in SharePoint 2010 LDAP: http://go.gvaro.net/FBALDAP ASP.NET Membership DB: http://go.gvaro.net/FBAANMDB 23 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

24. Resources PeoplePicker Wildcard Search http://go.gvaro.net/FBAWildCard Helpful Resources for Troubleshooting Membership Providers http://go.gvaro.net/TSMemProv “Sign me in automatically” in FBA http://go.gvaro.net/pAkDQP 24 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

25. 25 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

27. 6P – 8PM

28. Microsoft Waltham & Cambridge

29. http://www.bostonsharepointug.org

30. Twitter: @BASPUG / #BASPUGemail: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

31. Where am I next? Granite State SharePoint Users Group http://www.granitestatesharepoint.org October 13th Loved this session? See it again here! Baltimore SharePoint Users Group http://www.baltimoresug.org October 20th 27 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

32. Q&A 28 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro

33. About Me Geoff Varosky Jornata Director, Development & Evangelism Blogger, Speaker BASPUG Co-Founder SPS Boston Co-Organizer Blog : www.sharepointyankee.com Email: geoff.varosky@jornata.com Twitter: @gvaro LinkedIn & Facebook 29 Thinking SharePoint? Think Jornata. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro