building an extranet with office 365

Building an Extranet with Office 365

Paul Papanek Stork

• Principal Architect for BlueChip Consulting Group• http://www.bluechip-llc.com

• Contributing Author• Developer’s Guide to WSS 3.0• MOSS 2007 Best Practices

• Author • MCTS: WSS 3.0 Configuration Study Guide (70-631)• Pro SharePoint 2010 Development for Office 365

• Contact Information• Email: Paul.Stork@bluechip-llc.com• Blog: http://dontPaPanic.com/blog• Twitter: @PStork

Agenda

• On-Premise Extranet Challenges• SharePoint 2013 Licensing Changes• Office 365 Primer• PALs vs. CALs• Designing an Extranet• Inviting External Users• Live Demonstration

What is an Extranet?

• Intranet Site – Used for collaboration or dissemination of information to Internal Users

• Internet Facing Site – Used to Publish information to Anonymous External Users

• Extranet Site – Used for collaboration or sharing of information between External and Internal Users

Who are External Users?

• Internal Users• Your employees• Onsite contractors• Employees of your affilitates

• External Users• Anyone who isn’t an Internal User

On-Premise Extranet Designs

• Edge Firewall – Single Firewall between SharePoint and Outside Users

• Back to Back Perimeter Network – Separate SharePoint Farm in a Perimeter Network

• Split Back to Back Perimeter Network – Separate SharePoint Farm with Internal SQL resources

On-Premise Challenges

• Infrastructure• Firewall and DMZ adjustments• Anti-virus (now that Forefront AV is gone)

• Multiple Authentication Providers• Internal users - AD• External users - Forms based Authentication

• Licensing• External Users require Internet Licensing• Changed for SharePoint 2013

2013 Licensing Change

• 2007• Internet License for Enterprise only• About $40,000

• 2010• SharePoint 2010 for Internet Sites, Standard

$10,000 retail• SharePoint 2010 for Internet Sites, Enterprise

Still about $40,000

• 2013• External Users are FREE!

Office 365 Licensing Plans• P - Small and Midsize Businesses• E – Enterprise Businesses• K – Kiosk Worker• A – Education• G – Government• Online Services (ala Carte)

• Office Professional Plus• Exchange• SharePoint• Lync

A Quick Tour of O365

What are PALs?

• Client Access Licenses (CAL)• One required for each Internal User

• Partner Access License (PAL)• Allows External User Access – FREE!

• P1 Small – 500 Free• P2 Midsize – 10,000 Free• E Subscription – 10,000 Free

Typical Extranet Designs

• One Site Collection per Partner• Easiest to Deploy• No communication between Partners

• One Site Collection with Partner Sub Sites• Root Site can be used for Overall Communication• Break Security Inheritance on Sub-Sites• More Complex Design to maintain

Important Limits

• Boundaries and Limits vary by Subscription Type

• E3 Key Boundaries and Limits• 100GB + 500MB per licensed user total storage• 100GB Max Quota per site collection• 3,000 site collections w/ 2,000 sub-sites• 250MB File Upload limit• 10,000 PALs for External Users

Building an Extranet

Inviting External Users

• Enable Sharing – Off by Default• Share Extranet Root

• Read Only• Site Visitors Group

• Share Company Sub-Site • Requires Breaking Security Inheritance• Contribute Permission• Company Members Group

Enable Sharing

Admin Groups

• By Default three Groups for each Site Collection• Site Collection Owners – Full Control• Site Collection Members – Edit• Site Collection Visitors – Read Only

• New Sub-Site with Unique Security• Can create up to 3 additional groups

• 3 Additional Groups can be created manually• http://siteUrl/__layouts/15/permsetup.aspx

Inviting External Users

Managing External Users

• Withdraw Invitations• Site Settings>Users and Permissions>Access

requests and invitations.

• Closing an Anonymous Guest Link• Delete Guest Link on Open Menu in Library

• Remove External Users• Configure SharePoint Online Management Shell• Must be a SharePoint Online Global Admin• Get-SPOExternalUser -Position 0 -PageSize 30 -

Filter @testsite.com• Remove-SPOExternal User -UniqueIDs @”GUID”

SharePoint Online Management

1. Install PowerShell 3.0

2. Install the SharePoint Online Management Shell

3. Start>All Programs>SharePoint Online Management Shell.

4. Connect-SPOService -Url https://extranetsite.sharepoint.com -credential AdminId

1.Install Windows PowerShell 3.0 from Windows Management Framework 3.0.2.Install the SharePoint Online Management Shell from the Microsoft Download Center.3.Click Start>All Programs>SharePoint Online Management Shell.4.Run Connect-SPOService. For example, Connect-SPOService -Url https://contoso-admin.sharepoint.com -credential admin@contoso.com, where:

•Url is the URL of the SharePoint Online Administration Center.•Credential is the user name to which you want to grant access to the SharePoint Online Administration Center site.

Removing External Users

Avoiding Pitfalls

• Take advantage of an O365 Trial• Do a Cost Benefit Analysis• Name Groups Carefully• Consider SharePoint Online Only

Additional Resources

• Sign-Up for an Office 365 thirty day Trialhttp://tinyurl.com/O365trial

• Windows PowerShell for SharePoint Onlinehttp://tinyurl.com/SptOnlinePowerShell

• Manage external sharing for your SharePoint online environmenthttp://tinyurl.com/ManageExternalUsers

• SharePoint Online Boundaries and Limitshttp://tinyurl.com/SptOnlineLimits

QUESTIONS?

Contact InformationEmail: Paul.Stork@bluechip-llc.com

Blog: http://dontPaPanic.com/blog

Twitter: @PStork