Hybrid Search Bonanza - European SharePoint Conference 2015
•Als PPTX, PDF herunterladen•
2 gefällt mir•771 views
How to fulfill your enterprise search vision using SharePoint Server and Microsoft Office 365
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Hybrid Search Bonanza - European SharePoint Conference 2015
Ähnlich wie Hybrid Search Bonanza - European SharePoint Conference 2015 (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Hybrid Search Bonanza - European SharePoint Conference 2015
- 1. Hybrid Search Bonanza Cloud Search Service Application - Custom Security Trimmer and Claims Provider Petter Skodvin-Hvammen - Puzzlepart
- 2. Petter Skodvin-Hvammen skodvinhvammen.wordpress.com | @pettersh | petter.skodvin-hvammen@puzzlepart.com business apps for sharepoint Principal Consultant http://www.puzzlepart.com
- 3. The Ultimate Vision of Enterprise Search! One Search Box | Blended Search Results | Common Ranking | One Index Image couresy of https://en.wikipedia.org/wiki/Portal:Middle-earth/Selected_picture/4 Search in Everything
- 4. Multiple Auth Providers Custom Claims Provider Custom Security Trimming Search across multiple domains on-prem Getting Started Cloud scenarios On-prem scenarios Extras Search across on-prem and Office 365 Scenario 1 Scenario 2
- 5. Scenario 1 Search across multiple domains on-prem
- 6. Intranet • SharePoint 2013 farm in the corporate domain / internal network • Windows authentication only • Only Internal users in Active Directory Scenario 1 CONTOSO Active Directory Windows Authentication https://intranet.contoso.com Internal users
- 7. Extranet • SharePoint 2013 farm in an external domain / external network • ADFS/SAML authentication • Internal and external users in MS SQL Server • Custom claims provider Scenario 1 EXTERNAL SQL Server SAML Authentication https://extranet.contoso.com Custom Claims Provider External users ADFS
- 8. Business Requirements Scenario 1 Internal users External users Intranet Extranet
- 9. Scenario 1 CONTOSO EXTERNAL ADFS Trust Active Directory SQL Server SAML Authentication https://extranet.contoso.com Custom Claims Provider FIM Sync Internal domain users External users (individual) • ADFS trust to authenticate • Internal users • External users authenticated by trusted partners • ADFS using SQL database as directory • FIM synch to external users DB • Custom claims provider ADFS Trust External users (partner domain)
- 10. Claims Based Authentication Issuer (Trusted Provider) Identity / Subject (SSN) Roles Claims
- 11. ADFS Configuration and External User DB • PPID as Identity Claim • http://schemas.xmlsoap.org/ws/2005/05/ identity/claims/privatepersonalidentifier • Groups SID (Internal users) • http://schemas.microsoft.com/ws/2008/06/ identity/claims/groupsid Scenario 1 https://fsext.contoso.com/adfs/ls/ Id Sid Domain 12345 S-1-5-21-606747145-796845957-725345543-571903 CONTOSO 23456 S-1-5-21-606747145-796845957-725345543-540805 FABRICAM 34567 S-1-5-21-606747145-796845957-725345543-1734 - CONTOSO FABRICAMEXTERNAL USERS Configure SAML-based claims authentication with AD FS in SharePoint 2013 https://technet.microsoft.com/en-us/library/hh305235.aspx https://fs.fabricam.com/adfs/ls/ https://fsint.contoso.com/adfs/ls/
- 12. Custom Claims Provider / People Picker • Search and name resolution • Internal and external users from Users table in SQL Server • Internal groups from Active Directory (CONTOSO) • ACLs matching ADFS claims Scenario 1 Plan for custom claims providers for People Picker in SharePoint 2013 https://technet.microsoft.com/en-us/library/gg602072.aspx Claims-based identity in SharePoint 2013 https://msdn.microsoft.com/en-us/library/office/ee535242.aspx
- 13. Crawling external content from internal farm • Setup windows authentication in external web application • Why not multiple zones? • Same urls for internal and external users ease collaboration • Internal users manage permissions for external users • Crawl default zone or else… • Outlook use default zone for calendar integration… • Alerts and emails… Scenario 1
- 14. Multiple Authentication Providers… Scenario 1 ADFS
- 15. Scenario 1 CONTOSO EXTERNAL ADFS Trust Active Directory SQL Server SAML Authentication Windows Authentication https://intranet.contoso.com https://extranet.contoso.com Custom Claims Provider FIM Sync CrawlSearch ADFS Trust Internal domain users External users (individual) External users (partner domain)
- 16. Querying external content in internal farm Scenario 1
- 17. Internal Windows Claims Claim Type Claim Value Issuer Original Issuer http://schemas.microsoft.com/ws/2008/06/ identity/claims/primarysid S-1-5-21-606747145-796845957- 725345543-571903 SharePoint Windows http://schemas.microsoft.com/ws/2008/06/ identity/claims/primarygroupsid S-1-5-21-606747145-796845957- 725345543-1734 SharePoint Windows http://schemas.xmlsoap.org/ws/2005/05/ identity/claims/upn petter.skodvin- hvammen@contoso.com SharePoint Windows http://schemas.microsoft.com/sharepoint/ 2009/08/claims/userlogonname CONTOSOpetter SharePoint Windows http://schemas.microsoft.com/ws/2008/06/ identity/claims/groupsid S-1-5-21-606747145-796845957- 725345543-1734 SharePoint Windows http://schemas.microsoft.com/ws/2008/06/ identity/claims/groupsid S-1-5-21-606747145-796845957- 725345543-540805 SharePoint Windows
- 18. External ADFS / SAML Claims Claim Type Claim Value Issuer Original Issuer http://schemas.xmlsoap.org/ws/2005/05/ identity/claims/privatepersonalidentifier 12345 SharePoint TrustedProvider: ADSFS http://schemas.xmlsoap.org/ws/2005/05/ identity/claims/nameidentifier 12345 SharePoint SharePoint http://schemas.xmlsoap.org/ws/2009/08/ claims/userid 0.t|adfs|12345 SharePoint SecurityTokenSer vice http://schemas.microsoft.com/sharepoint/ 2005/05/claims/name 0.t|adfs|12345 SharePoint SecurityTokenSer vice http://schemas.microsoft.com/ws/2008/ 06/identity/claims/groupsid S-1-5-21-606747145-796845957- 725345543-1734 SharePoint TrustedProvider: ADFS http://schemas.microsoft.com/ws/2008/ 06/identity/claims/groupsid S-1-5-21-606747145-796845957- 725345543-540805 SharePoint TrustedProvider: ADFS
- 19. Custom Security Trimmer • Runs as search service account • Loaded by Query Component • Requires a local cache for performance / latency • Beware of not being able to RunWithElevatedPrivileges Scenario 1
- 20. DEMO Security Trimmer in Visual Studio https://github.com/pskodvin/sp2013-securitytrimmer Scenario 1
- 21. Scenario 2 Search across on-prem and Office 365 Cloud Search Service Application
- 22. The New Cloud Search Service Application • SharePoint Server 2016 and 2013 with August 2015 Update Documentation and scripts on • https://connect.microsoft.com/office Scenario 2
- 23. Scenario 2 • Search Server Name • Search Service Account • Search Service Application Name • Database Server Name Create a Cloud Search Service Application
- 24. Scenario 2
- 25. Scenario 2 • Portal Url • Hybrid SSA Id Configure Integration On-prem Farm – Office 365 Tenant
- 26. Cloud Search Service Application DEMO - SharePoint Server 2013 Scenario 2
- 27. SharePoint Online – Search On-Prem Sources • SharePoint Content • SharePoint User Profiles • Web Sites • File Shares • BCS Connector (Databases / Web services) • .NET Connectors (Custom / Third Party) Scenario 2
- 28. Search On-Prem Content DEMO - SharePoint Online Scenario 2
- 29. SharePoint Online – Search On-Prem Sources • Document Previews • On-Prem Office Web Application Server • Content Source Refiner • Search configuration available from https://github.com/pskodvin/search-configuration • Open files from on-prem file shares • Setup IIS on file server • Server name mappings • Endpoint configuration Scenario 2
- 30. Content Search Web Part DEMO – On-Prem Content Scenario 2
- 31. SharePoint On-Prem – Search Office 365 • SharePoint Content • Delve User Profiles • OneDrive 4 Biz • Delve Blogs • Office 365 Videos What about? • Office 365 Groups • Sways • Office Graph • GraphQuery property not yet supported for SharePoint 2013 Scenario 2
- 32. Search Office 365 Content DEMO - SharePoint Server 2013 Scenario 2
- 33. Search First Migration Scenario 2 Production Staging Test Production Staging Test Production
- 34. Related Sessions Tuesday • 15:15 - The Four Pillars of Enterprise Search Strategy (Joel Olesen) • 15:15 - Closer look at the new Cloud Hybrid Search Solution (Donald Hessing) Wednesday • 10:15 - Developing Search-driven Applications with SharePoint, the Office Graph and Azure Search (Jeff Fried) • 11:45 - Office 365 SharePoint Hybrid – What’s New & Roadmap (Bill Baer) Thursday • 14:00 - Content Recommendation with SharePoint Search (André Vala)
- 35. Petter Skodvin-Hvammen skodvinhvammen.wordpress.com | @pettersh | petter.skodvin-hvammen@puzzlepart.com Principal Consultant Thank You!
Hinweis der Redaktion
- Internal users: Access intranet and extranet using their corporate windows account Search for both internal and external content External users: Access extranet using their registered credentials or their partner windows account Search for external content only
- As Ingunn: SharePoint Content As Petter: Rest of the stuff
- As Ingunn: As Petter:
- https://espc15hybrid.sharepoint.com/_api/search/query?querytext='hybrid+search+bonanza'&selectproperties='Title%2cEdges%2cPath'&properties='GraphQuery:ACTOR(ME)' http://pettersh-sp2013.cloudapp.net/_api/search/query?querytext='hybrid+search+bonanza'&selectproperties='Title%2cEdges%2cPath'&properties='GraphQuery:ACTOR(ME)'
- As Petter: One Drive Expenses http://pettersh-sp2013.cloudapp.net/search/Pages/results.aspx?k=%2A#k=expenses Timesheet http://pettersh-sp2013.cloudapp.net/search/Pages/results.aspx?k=%2A#k=timesheet Blog Zoo http://pettersh-sp2013.cloudapp.net/search/Pages/results.aspx?k=zoo Video Beach http://pettersh-sp2013.cloudapp.net/search/Pages/results.aspx?k=zoo#k=beach