2018 09-03 aOS Aachen - SharePoint demystified - Thomas Vochten

1. Hybrid SharePoint Demystified
@thomasvochten
aOS Aachen 03/09/2018
IT PRO - Level 300

2. Thanks to the sponsors!
Platinum
Organizer
Diamond

3. Thomas Vochten
Microsoft MVP. Solution architect Office
365 & SharePoint. Technical Evangelist.
@thomasvochten
https://thomasvochten.com
mail@thomasvochten.com

5. Agenda
• Business drivers
• Prerequisites
• Capabilities walkthrough
• Configuration overview
• Limitations & considerations

6. Why Hybrid?
• Prepare their minds for the cloud (think culture shift)
• Take advantage of cloud offerings (think OneDrive)
• Take advantage of cloud innovations (think Delve)
• SharePoint on-premises is complicated (think Extranets)
• Keep special data and applications on-premises (think farm solutions)

7. Move to the cloud
at your own pace

8. Bridge the gap with hybrid
• Hybrid OneDrive
• Hybrid Profile Redirection
• Hybrid Sites
• Hybrid App Launcher
• Hybrid Taxonomy & Content Types
• Hybrid Auditing (Preview)
• Hybrid Extranet
• Hybrid Self Service Site Creation
• Hybrid Search

9. Prerequisites for hybrid

10. Which version of SharePoint do I need?
Feature SP 2013 SP 2016
Federated hybrid search RTM RTM
Cloud hybrid search 01/2016 CU RTM
Hybrid app launcher 07/2016 CU RTM
Hybrid OneDrive & Profiles 09/2015 CU RTM
Hybrid Sites 07/2016 CU RTM
Hybrid Taxonomy 11/2016 CU FP1 (11/2016 CU)
Hybrid Content Types 06/2017 CU 06/2017 CU
Hybrid Auditing (preview) N/A FP1 (11/2016 CU)
Hybrid self service site creation 03/2017 CU 11/2017 CU
MySite creation defaults to
OneDrive for Business
10/2017 CU N/A

11. Minimum Requirements for Hybrid Topologies
• Decent internet connectivity
• Office 365 Enterprise subscriptions
• SharePoint Server 2013/2016
• SharePoint Admin account for on-premises
• Tenant Admin account for Office 365
• Required service applications
• App Management Service
• Subscription Settings Service
• User Profile Service
• Search Service

12. Additional Prerequisites for Search
• Microsoft Online Services Sign-In Assistant
• Azure Active Directory Module for Windows
PowerShell (MSOnline)
Caution
Hybrid search only works with Windows
Authentication!

13. Identity Management
Cloud Identity
Single identity in the cloud
Suitable for small
organizations with no
integration to on-premises
directories
Directory &
Password Sync*
Single identity
suitable for medium
and large organizations
without federation*
Federated Identity
Single federated identity
and credentials suitable
for medium and large
organizations
On Premises Identity
Domain based identity
solution suitable for all
organizations
Synchronized with
password or federated
identities
Internet routable AD
domain

14. Hybrid OneDrive
Hybrid Profiles

15. What does it provide?
• OneDrive redirection
• User Profile Redirection

16. Demo
Hybrid OneDrive & Profiles

17. What it is not
• Redirect from Online to On-Premises
• User Profile Synchronisation or Import from On-Premises
You might want to migrate additional properties
that are not synced by AD Connect
User Profile Batch Update API
http://thvo.me/pnpuserupdate

18. Hybrid Sites

19. What does it provide?
• Hybrid OneDrive
• User Profile Redirect
+ Sites that you follow on-prem appear in Office 365
+ App Launcher integration

20. Demo
Hybrid Sites

21. What it is not
• Nothing to do with the Site itself!
• A site that is spread across on-prem and online
• Provisioning of on-premises or online sites

22. Hybrid App Launcher

23. Hybrid App Launcher
• Pin custom apps to the App Launcher in online
• See them appear in on-premises

24. Demo
Hybrid App Launcher

29. Hybrid
Taxonomy

30. Hybrid Taxonomy (aka Metadata)
• Copy your existing on-premises term store / ctypes to the cloud
• SharePoint Online becomes the master
• Keep on-premises in sync:
Name Schedule
---- --------
Taxonomy Groups Replication daily between 02:00:00 and 04:59:59
Content Type Replication daily between 02:00:00 and 04:59:59

31. Demo
Hybrid Taxonomy

32. Hybrid Taxonomy
Initial movement of the data to the cloud (Optional)
Copy-SPTaxonomyGroups -LocalTermStoreName "Managed Metadata Service Application Proxy" `
-RemoteSiteUrl https://thvo.sharepoint.com `
-LocalSiteUrl "https://teams.thvo.net" `
-GroupNames "hybrid" `
-Credential $cred

33. Demo
Hybrid Content Types

34. Hybrid Content Types
Initial movement of the data to the cloud (Optional)
Copy-SPContentTypes -LocalSiteUrl https://teams.thvo.net
-LocalTermStoreName “Managed Metadata Service Application Proxy“
-RemoteSiteUrl https://thvo.sharepoint.com
-ContentTypeNames @("ContentTypeA", "ContentTypeB")
-Credential credential

35. Hybrid Content Types

36. Hybrid Content Type Hubs

37. Hybrid Auditing

38. Hybrid Auditing
• Send SharePoint diagnostic and usage logs to the cloud
• Online and on-premises auditing in one tool
• SharePoint 2016 only
• Still in preview

39. Demo
Hybrid Auditing

40. Hybrid Auditing

41. Hybrid Auditing
List administrative actions through PowerShell:
Merge-SPUsageLog -Identity "Administrative Actions"

43. Hybrid Search

44. Query Federation
• Separate result blocks
• Maximum 10 results
• Without ranking and
relevance integration
• No refiners
• Complex for inbound
scenario’s

45. Cloud Hybrid Search
• Single unified index - in the cloud
• True relevance ranking and refiners
• Supports all existing on-premises content sources

46. Query Federation vs Cloud Hybrid Search
New Cloud Hybrid SearchSP2013 Hybrid Search

47. Search Experience

48. Demo
Hybrid Search

49. Setup Approach
• Create a new cloud search service application
• Run the onboarding PowerShell script
• Start a crawl
• Test your search in online
• Create result source in on-premises
• Test your search in on-premises
NEW: Run the Hybrid Configuration Wizard

50. Impact on Topology and Sizing
Index component is still there, but not used anymore

51. Tip | IsExternal managed property
All on-premises content is tagged with a new managed property:
IsExternalContent

52. Tip | Result sources & search verticals
{searchTerms} (IsExternalContent:1)
{searchTerms} ((IsExternalContent:1) AND Path:"file://archive")

53. Tip | Use a Display Template in SPO
Highlight on-premises content with a special icon
http://thvo.me/displaytemplatehybrid
Developed by Elio Struyf

54. Additional scenario’s for hybrid search
• Geo-distributed environments all
using the same index
• eDiscovery & compliancy features are
based on search
• Archiving and migration scenario’s

55. Hybrid Search - Limitations
• No internet, no search
• Limited customization options
No entity extraction
No content enrichment
Other SPO search limitations
• No good central administration integration
• No dashboard of your online index search health

56. Hybrid Search - The Cost
Hybrid search is free, …kind of
1 million on-premises items per 1 TB of
pooled storage in SPO

57. Configuration
Introducing the SharePoint Hybrid Picker

58. Hybrid Configuration Wizards

67. Trust Creation

68. Trust Creation
On-Premises cmdlets:
Get-SPTrustedSecurityTokenIssuer
Get-SPTrustedRootAuthority
Azure cmdlets:
Get-MsolServicePrincipal

69. On-Prem Configuration for OneDrive & Profiles

70. On-Prem Configuration for OneDrive & Profiles

71. Hybrid limitations &
considerations

72. Different features, different needs
Scenario Identity Sync Single Sign On Trust creation Reverse Proxy
OneDrive Y O O N
Profiles Y O O N
Sites Y O Y N
Search Y O Y O

73. Caution!
Enabling hybrid features can break
• Provider hosted add-ins
• Workflow Manager trust
Always use the latest scripts & wizards provided by MSFT!
Workaround: configure hybrid first, or re-establish trusts
http://thvo.me/hybridsearchfixtrust

74. Questions?

75. @thomasvochten

76. Thanks to the sponsors!
Platinum
Organizer
Diamond