Planning and Configuring Extranets in SharePoint 2010
0 likes1,851 views
The document is a presentation by Geoff Varosky of Jornata on planning and configuring extranets in SharePoint 2010. It discusses what an extranet is, requirements for setting one up such as authentication methods and security considerations, and how to configure SharePoint 2010 with forms-based authentication to an ASP.NET membership database for external user access and management.
Planning and Configuring Extranets in SharePoint 2010
- 1. Thinking SharePoint? Think Jornata. Planning and Configuring Extranets in SharePoint 2010 Prepared for Prepared by Geoff Varosky Jornata Jornata 61-63 Chatham Street Fourth Floor Boston, MA 02109 Submitted on January 9, 2012
- 2. About Me • Geoff Varosky – Jornata • Director, Development & Evangelism • Blogger, Speaker • BASPUG Co-Founder • SPS Boston Co-Organizer – Blog : www.sharepointyankee.com – Email: geoff.varosky@jornata.com – Twitter: @gvaro – LinkedIn & Facebook email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 2 Thinking SharePoint? Think Jornata.
- 3. Agenda • Thinking – What is an extranet? – Requirements – SharePoint 2010 • Doing – Configuration • Forms Based Authentication – ASP.Net SQL Membership Database • SharePoint • IIS – User and Role Management email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 3 Thinking SharePoint? Think Jornata.
- 4. What is an extranet? email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 4 Thinking SharePoint? Think Jornata.
- 5. What is an extranet? email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 5 Thinking SharePoint? Think Jornata.
- 6. What is an extranet? Controlled access from external networks email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 6 Thinking SharePoint? Think Jornata.
- 7. What is an extranet? Controlled access from EXTeRnAl NETworks email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 7 Thinking SharePoint? Think Jornata.
- 8. Simple Extranet Example email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 8 Thinking SharePoint? Think Jornata.
- 9. Requirements • What do you REALLY need? – Who needs access? – How sensitive is the data? – How sensitive is your network? – Budget? email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 9 Thinking SharePoint? Think Jornata.
- 10. Requirements email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 10 Thinking SharePoint? Think Jornata.
- 11. Requirements • Who needs access? – Internal employees only? • Active Directory – Internal employees and external users? • Active Directory – Additional domain with restricted access • Active Directory & Forms Based Authentication – Claims Authentication – External • Clients, partners, consultants – Active Directory – Forms Based Authentication – Separate or together? email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 11 Thinking SharePoint? Think Jornata.
- 12. Remember this… You are giving a key to access your company’s data in some form or another. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 12 Thinking SharePoint? Think Jornata.
- 13. Requirements • How sensitive is the data & internal network? – Network & SharePoint • DMZ • Separate web application • Separate farm email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 13 Thinking SharePoint? Think Jornata.
- 14. Requirements • How sensitive is the data & internal network? – Security • Secure Certificates (SSL) • Encryption • Firewall – Both hardware and software? – Content Filtering – ACLs • Virtual Private Network • Anti-Virus and Anti-Malware • Client-based certificates • One-time passwords (RSA tokens) • Phone verification • Biometrics – Retina, fingerprint, facial structure, hair and blood samples email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 14 Thinking SharePoint? Think Jornata.
- 15. SharePoint 2010 email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 15 Thinking SharePoint? Think Jornata.
- 16. SharePoint 2010 • Versions? – Foundation up to Enterprise Server 2010 • Claims Based Authentication – Forms Based Authentication – Office 365? – Configuration (and our Demo) • Create ASP.NET Membership Database • Configure SharePoint • Configure IIS • Create and Manage Users email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 16 Thinking SharePoint? Think Jornata.
- 17. DEMO! email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 17 Thinking SharePoint? Think Jornata.
- 18. Managing Users • IIS – Must change default role manager and membership providers each time = DOWNTIME. – Separate IIS Virtual Web Application • BCS – Great way to manage users (passwords, emails, etc.) – No ability to create users without another layer of logic • Codeplex – SharePoint 2010 FBA Pack • http://sharepoint2010fba.codeplex.com • 3rd Party… – DevIt.EU • http://www.devit.eu/ email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 18 Thinking SharePoint? Think Jornata.
- 19. Remember this too… • Test the configuration • Review security regularly email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 19 Thinking SharePoint? Think Jornata.
- 20. Resources • My blog series – Part 1 : http://go.gvaro.net/ExtranetsP1 – Part 2 : http://go.gvaro.net/ExtranetsP2 – Part 3 : http://go.gvaro.net/ExtranetsP3 • My Virtual Environment via CloudShare – SharePoint 2010 Information Worker image – Configured just about the same as we did here – On the desktop • Links to my information • Link to Extranet • 14 Day Trial • Use promo code GEOFF to get first month for $29! • http://go.gvaro.net/ExtranetsVM3 email: gvarosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 20 Thinking SharePoint? Think Jornata.
- 21. Resources • Phone Factor – Phone Verification – http://www.phonefactor.com • Plan Security Hardening (TechNet) – http://go.gvaro.net/uSyY1Z • SharePoint 2007 & 2010 Farm Ports (Firewall Config) – http://go.gvaro.net/uWQZzU • SharePoint Ports, Proxies, and Protocols (Firewall Config) – http://go.gvaro.net/tblxCn • Harden SQL Server for SharePoint – http://go.gvaro.net/viVQuN email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 21 Thinking SharePoint? Think Jornata.
- 22. Resources • Visual FBA configuration by Donal Conlon – http://go.gvaro.net/oPnAYx • Extranet tested topologies for SP 2010 Model – http://go.gvaro.net/SP2010ExtTopMod • ASP.NET 2.0 Membership Database Reference – Create, Add Users, etc. – http://go.gvaro.net/AN2Mbr • FBA Configuration in SharePoint 2010 – LDAP: http://go.gvaro.net/FBALDAP – ASP.NET Membership DB: http://go.gvaro.net/FBAANMDB email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 22 Thinking SharePoint? Think Jornata.
- 23. Resources • PeoplePicker Wildcard Search – http://go.gvaro.net/FBAWildCard • Helpful Resources for Troubleshooting Membership Providers – http://go.gvaro.net/TSMemProv • “Sign me in automatically” in FBA – http://go.gvaro.net/pAkDQP • Configuring SSL in a Development Environment – http://go.gvaro.net/uOTTlJ email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 23 Thinking SharePoint? Think Jornata.
- 24. email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 24 Thinking SharePoint? Think Jornata.
- 25. • Meets 2nd Wednesday/Month • 6P – 8PM • Microsoft Waltham & Cambridge • http://www.bostonsharepointug.org • Twitter: @BASPUG / #BASPUG email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 25 Thinking SharePoint? Think Jornata.
- 26. Q&A email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 26 Thinking SharePoint? Think Jornata.
- 27. About Me • Geoff Varosky – Jornata • Director, Development & Evangelism • Blogger, Speaker • BASPUG Co-Founder • SPS Boston Co-Organizer – Blog : www.sharepointyankee.com – Email: geoff.varosky@jornata.com – Twitter: @gvaro – LinkedIn & Facebook email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro 27 Thinking SharePoint? Think Jornata.