Planning and Configuring Extranets in SharePoint 2010
0 likes925 views
The document provides a comprehensive overview of planning and configuring extranets in SharePoint 2010, emphasizing the importance of controlled access from external networks. It outlines key requirements including user access considerations, data sensitivity, and security measures like SSL, firewalls, and authentication methods. The author also shares resources and tools for managing user configurations within SharePoint 2010 environments.
![About MeGeoff VaroskyGraceHuntSharePoint Solutions GroupDirector, Development & EvangelismBlogger, Author-ish, SpeakerBASPUG Co-FounderSPS Boston Co-OrganizerBlog : www.sharepointyankee.comEmail: gvarosky@gracehunt.comTwitter: @gvaroLinkedIn & Facebookgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-2-320.jpg)
![AgendaThinkingWhat is an extranet?RequirementsSharePoint 2010DoingConfigurationSharePointAlternate Access MappingsIISManagementgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-3-320.jpg)
![What is an extranet?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-4-320.jpg)
![Controlled access from external networksgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-7-320.jpg)
![Controlled access from external networksgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-8-320.jpg)
![Simple Extranetgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-9-320.jpg)
![Requirementsgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-10-320.jpg)
![RequirementsWhat do you REALLY need?Who needs access?How sensitive is the data?How sensitive is your network?Budget?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-11-320.jpg)
![Requirementsgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-12-320.jpg)
![RequirementsWho needs access?Internal employees only?Active DirectoryInternal employees and external users?Active DirectoryAdditional domain with restricted accessActive Directory & Forms Based AuthenticationClaims AuthenticationExternalClients, partners, consultantsActive DirectoryForms Based AuthenticationSeparate or together?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-13-320.jpg)
![RequirementsHow sensitive is the data & internal network?Network & SharePointDMZSeparate web applicationSeparate farmSecuritySSL SecurityFirewallBoth hardware and software?Content FilteringVirtual Private NetworkAnti-Virus and Anti-MalwareClient-based certificatesOne-time passwords (RSA tokens)BiometricsRetina, fingerprint, facial structure, hair and blood samplesgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-14-320.jpg)
![Remember this…You are giving a key to access your company’s data in some form or another.geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-15-320.jpg)
![The landscaper…geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-16-320.jpg)
![RequirementsHow sensitive is the data & internal network?Network & SharePointDMZSeparate web applicationSeparate farmgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-17-320.jpg)
![RequirementsHow sensitive is the data & internal network?SecuritySecure Certificates (SSL)EncryptionFirewallBoth hardware and software?Content FilteringACLsVirtual Private NetworkAnti-Virus and Anti-MalwareClient-based certificatesOne-time passwords (RSA tokens)BiometricsRetina, fingerprint, facial structure, hair and blood samplesgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-18-320.jpg)
![SharePoint 2010geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-19-320.jpg)
![SharePoint 2010Versions?Foundation up to Enterprise Server 2010Claims Based AuthenticationForms Based AuthenticationConfiguration (and our Demo)Create ASP.NET Membership DatabaseConfigure SharePointExtend Web Applicationweb.config settingsAlternate Access MappingsConfigure IISCreate and Manage Usersgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-20-320.jpg)
![DEMO!geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-21-320.jpg)
![Managing Users…IISMust change default role manager and membership providers each time = DOWNTIME.BCSGreat way to manage users (passwords, emails, etc.)No ability to create users without another layer of logicCodeplex SolutionsCKS Forms Based Authentication Solutionhttp://go.gvaro.net/CKSFBASThis *may* work, or, it may not. Mixed results.3rd Party…DevIt.EUhttp://www.devit.eu/products/121-fba-manager-2010-forms-based-authentication.aspxgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-22-320.jpg)
![And also, remember this too…Test the configurationReview security regularlygeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-23-320.jpg)
![ResourcesMy blog seriesPart 1 : http://go.gvaro.net/ExtranetsP1Part 2 : http://go.gvaro.net/ExtranetsP2Part 3 : http://go.gvaro.net/ExtranetsP3My Virtual Environment via CloudShareSharePoint 2010 Information Worker imageConfigured just about the same as we did hereOn the desktopLinks to my informationLink to Extranethttp://go.gvaro.net/ExtranetsVMgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-24-320.jpg)
![ResourcesExtranet tested topologies for SP 2010 Modelhttp://go.gvaro.net/SP2010ExtTopModASP.NET 2.0 Membership Database ReferenceCreate, Add Users, etc.http://go.gvaro.net/AN2MbrFBA Configuration in SharePoint 2010LDAP: http://go.gvaro.net/FBALDAPASP.NET Membership DB: http://go.gvaro.net/FBAANMDBgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-25-320.jpg)
![ResourcesFBA User Managementhttp://sharepoint2010fba.codeplex.comhttp://www.sharepoint-forms-authentication.comPeoplePickerWildcard Searchhttp://go.gvaro.net/FBAWildCardHelpful Resources for Troubleshooting Membership Providershttp://go.gvaro.net/TSMemProv“Sign me in automatically” in FBAhttp://go.gvaro.net/pAkDQPgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-26-320.jpg)
![geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-27-320.jpg)
![Meets 2nd Wednesday/Month6P – 8PMMicrosoft N.E.R.D. Centerhttp://www.bostonsharepointug.orgTwitter: @BASPUG / #BASPUGgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-28-320.jpg)
![Where’s Waldo…SharePoint Saturday – The Conferencehttp://www.spstc.orgAnnandale, VAAugust 11-13thSharePoint Saturday New Hampsterhttp://www.sharepointsaturday.org/nhSeptember 24thGranite State SharePoint Users Grouphttp://www.granitestatesharepoint.orgOctober 13thAlso New Hampster…Baltimore SharePoint Users Grouphttp://www.baltimoresug.orgOctober 20thgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-29-320.jpg)
![Q&Ageoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]](https://image.slidesharecdn.com/planningandconfiguringextranetsinsharepoint2010-110802085824-phpapp02/85/Planning-and-Configuring-Extranets-in-SharePoint-2010-30-320.jpg)
Planning and Configuring Extranets in SharePoint 2010
- 1. Planning and Configuring Extranets in SharePoint 2010Geoff Varosky
- 2. About MeGeoff VaroskyGraceHuntSharePoint Solutions GroupDirector, Development & EvangelismBlogger, Author-ish, SpeakerBASPUG Co-FounderSPS Boston Co-OrganizerBlog : www.sharepointyankee.comEmail: gvarosky@gracehunt.comTwitter: @gvaroLinkedIn & Facebookgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 3. AgendaThinkingWhat is an extranet?RequirementsSharePoint 2010DoingConfigurationSharePointAlternate Access MappingsIISManagementgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 4. What is an extranet?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 7. Controlled access from external networksgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 8. Controlled access from external networksgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 9. Simple Extranetgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 10. Requirementsgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 11. RequirementsWhat do you REALLY need?Who needs access?How sensitive is the data?How sensitive is your network?Budget?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 12. Requirementsgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 13. RequirementsWho needs access?Internal employees only?Active DirectoryInternal employees and external users?Active DirectoryAdditional domain with restricted accessActive Directory & Forms Based AuthenticationClaims AuthenticationExternalClients, partners, consultantsActive DirectoryForms Based AuthenticationSeparate or together?geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 14. RequirementsHow sensitive is the data & internal network?Network & SharePointDMZSeparate web applicationSeparate farmSecuritySSL SecurityFirewallBoth hardware and software?Content FilteringVirtual Private NetworkAnti-Virus and Anti-MalwareClient-based certificatesOne-time passwords (RSA tokens)BiometricsRetina, fingerprint, facial structure, hair and blood samplesgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 15. Remember this…You are giving a key to access your company’s data in some form or another.geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 16. The landscaper…geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 17. RequirementsHow sensitive is the data & internal network?Network & SharePointDMZSeparate web applicationSeparate farmgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 18. RequirementsHow sensitive is the data & internal network?SecuritySecure Certificates (SSL)EncryptionFirewallBoth hardware and software?Content FilteringACLsVirtual Private NetworkAnti-Virus and Anti-MalwareClient-based certificatesOne-time passwords (RSA tokens)BiometricsRetina, fingerprint, facial structure, hair and blood samplesgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 19. SharePoint 2010geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 20. SharePoint 2010Versions?Foundation up to Enterprise Server 2010Claims Based AuthenticationForms Based AuthenticationConfiguration (and our Demo)Create ASP.NET Membership DatabaseConfigure SharePointExtend Web Applicationweb.config settingsAlternate Access MappingsConfigure IISCreate and Manage Usersgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 21. DEMO!geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 22. Managing Users…IISMust change default role manager and membership providers each time = DOWNTIME.BCSGreat way to manage users (passwords, emails, etc.)No ability to create users without another layer of logicCodeplex SolutionsCKS Forms Based Authentication Solutionhttp://go.gvaro.net/CKSFBASThis *may* work, or, it may not. Mixed results.3rd Party…DevIt.EUhttp://www.devit.eu/products/121-fba-manager-2010-forms-based-authentication.aspxgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 23. And also, remember this too…Test the configurationReview security regularlygeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 24. ResourcesMy blog seriesPart 1 : http://go.gvaro.net/ExtranetsP1Part 2 : http://go.gvaro.net/ExtranetsP2Part 3 : http://go.gvaro.net/ExtranetsP3My Virtual Environment via CloudShareSharePoint 2010 Information Worker imageConfigured just about the same as we did hereOn the desktopLinks to my informationLink to Extranethttp://go.gvaro.net/ExtranetsVMgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 25. ResourcesExtranet tested topologies for SP 2010 Modelhttp://go.gvaro.net/SP2010ExtTopModASP.NET 2.0 Membership Database ReferenceCreate, Add Users, etc.http://go.gvaro.net/AN2MbrFBA Configuration in SharePoint 2010LDAP: http://go.gvaro.net/FBALDAPASP.NET Membership DB: http://go.gvaro.net/FBAANMDBgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 26. ResourcesFBA User Managementhttp://sharepoint2010fba.codeplex.comhttp://www.sharepoint-forms-authentication.comPeoplePickerWildcard Searchhttp://go.gvaro.net/FBAWildCardHelpful Resources for Troubleshooting Membership Providershttp://go.gvaro.net/TSMemProv“Sign me in automatically” in FBAhttp://go.gvaro.net/pAkDQPgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 27. geoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 28. Meets 2nd Wednesday/Month6P – 8PMMicrosoft N.E.R.D. Centerhttp://www.bostonsharepointug.orgTwitter: @BASPUG / #BASPUGgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 29. Where’s Waldo…SharePoint Saturday – The Conferencehttp://www.spstc.orgAnnandale, VAAugust 11-13thSharePoint Saturday New Hampsterhttp://www.sharepointsaturday.org/nhSeptember 24thGranite State SharePoint Users Grouphttp://www.granitestatesharepoint.orgOctober 13thAlso New Hampster…Baltimore SharePoint Users Grouphttp://www.baltimoresug.orgOctober 20thgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 30. Q&Ageoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]
- 31. About MeGeoff VaroskyGraceHuntSharePoint Solutions GroupDirector, Development & EvangelismBlogger, Author-ish, SpeakerBASPUG Co-FounderSPS Boston Co-OrganizerBlog : www.sharepointyankee.comEmail: gvarosky@gracehunt.comTwitter: @gvaroLinkedIn & Facebookgeoffvaroskygvarosky@gracehunt.com [email]www.gracehunt.com [web]sharepointyankee.com [blog]@gvaro [twitter]