Planning and Configuring Extranets in SharePoint 2010

Thinking SharePoint? Think Jornata.

Planning and Configuring
Extranets in SharePoint 2010
Prepared for
Prepared by Geoff Varosky
Jornata
Jornata
61-63 Chatham Street
Fourth Floor
Boston, MA 02109
Submitted on January 9, 2012

About Me
• Geoff Varosky
– Jornata
• Director, Development & Evangelism
• Blogger, Speaker
• BASPUG Co-Founder
• SPS Boston Co-Organizer
– Blog : www.sharepointyankee.com
– Email: geoff.varosky@jornata.com
– Twitter: @gvaro
– LinkedIn & Facebook
email: geoff.varosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro
2

Agenda
• Thinking
– What is an extranet?
– Requirements
– SharePoint 2010

• Doing
– Configuration
• Forms Based Authentication
– ASP.Net SQL Membership Database
• SharePoint
• IIS
– User and Role Management

3

What is an extranet?

4


5


Controlled access from
external networks

6


Controlled access from
EXTeRnAl NETworks

7

Simple Extranet Example

8

Requirements
• What do you REALLY need?
– Who needs access?
– How sensitive is the data?
– How sensitive is your network?
– Budget?

9

Requirements

10

Requirements
• Who needs access?
– Internal employees only?
• Active Directory
– Internal employees and external users?
• Active Directory
– Additional domain with restricted access
• Active Directory & Forms Based Authentication
– Claims Authentication
– External
• Clients, partners, consultants
– Active Directory
– Forms Based Authentication
– Separate or together?

11

Remember this…

You are giving a key
to access your
company’s data in
some form or
another.
12

Requirements
• How sensitive is the data & internal network?
– Network & SharePoint
• DMZ
• Separate web application
• Separate farm

13

Requirements
• How sensitive is the data & internal network?
– Security
• Secure Certificates (SSL)
• Encryption
• Firewall
– Both hardware and software?
– Content Filtering
– ACLs
• Virtual Private Network
• Anti-Virus and Anti-Malware
• Client-based certificates
• One-time passwords (RSA tokens)
• Phone verification
• Biometrics
– Retina, fingerprint, facial structure, hair and blood samples

14

SharePoint 2010

15

SharePoint 2010
• Versions?
– Foundation up to Enterprise Server 2010
• Claims Based Authentication
– Forms Based Authentication

– Office 365?

– Configuration (and our Demo)
• Create ASP.NET Membership Database
• Configure SharePoint
• Configure IIS
• Create and Manage Users

16

DEMO!

17

Managing Users
• IIS
– Must change default role manager and membership providers
each time = DOWNTIME.
– Separate IIS Virtual Web Application
• BCS
– Great way to manage users (passwords, emails, etc.)
– No ability to create users without another layer of logic
• Codeplex
– SharePoint 2010 FBA Pack
• http://sharepoint2010fba.codeplex.com
• 3rd Party…
– DevIt.EU
• http://www.devit.eu/
18

Remember this too…
• Test the configuration
• Review security regularly

19

Resources
• My blog series
– Part 1 : http://go.gvaro.net/ExtranetsP1

• My Virtual Environment via CloudShare
– SharePoint 2010 Information Worker image
– Configured just about the same as we did here
– On the desktop
• Links to my information
• Link to Extranet
• 14 Day Trial
• Use promo code GEOFF to get first month for $29!
• http://go.gvaro.net/ExtranetsVM3
email: gvarosky@jornata.com | web: www.jornata.com | blog: www.sharepointyankee.com | twitter: @gvaro
20

Resources
• Phone Factor – Phone Verification
– http://www.phonefactor.com
• Plan Security Hardening (TechNet)
– http://go.gvaro.net/uSyY1Z
• SharePoint 2007 & 2010 Farm Ports (Firewall Config)
– http://go.gvaro.net/uWQZzU
• SharePoint Ports, Proxies, and Protocols (Firewall Config)
– http://go.gvaro.net/tblxCn
• Harden SQL Server for SharePoint
– http://go.gvaro.net/viVQuN

21

Resources
• Visual FBA configuration by Donal Conlon
– http://go.gvaro.net/oPnAYx

• Extranet tested topologies for SP 2010 Model
– http://go.gvaro.net/SP2010ExtTopMod

• ASP.NET 2.0 Membership Database Reference
– Create, Add Users, etc.
– http://go.gvaro.net/AN2Mbr

• FBA Configuration in SharePoint 2010
– LDAP: http://go.gvaro.net/FBALDAP
– ASP.NET Membership DB: http://go.gvaro.net/FBAANMDB

22

Resources
• PeoplePicker Wildcard Search
– http://go.gvaro.net/FBAWildCard

• Helpful Resources for Troubleshooting Membership
Providers
– http://go.gvaro.net/TSMemProv

• “Sign me in automatically” in FBA
– http://go.gvaro.net/pAkDQP

• Configuring SSL in a Development Environment
– http://go.gvaro.net/uOTTlJ
23

24

• Meets 2nd Wednesday/Month
• 6P – 8PM
• Microsoft Waltham & Cambridge
• http://www.bostonsharepointug.org
• Twitter: @BASPUG / #BASPUG

25

Q&A

26

About Me
• Geoff Varosky
– Jornata
• Director, Development & Evangelism
• Blogger, Speaker
• BASPUG Co-Founder
• SPS Boston Co-Organizer
– Blog : www.sharepointyankee.com
– Email: geoff.varosky@jornata.com
– Twitter: @gvaro
– LinkedIn & Facebook
27

Planning and Configuring Extranets in SharePoint 2010

Recommended

Recommended

More Related Content

What's hot

What's hot (19)

Similar to Planning and Configuring Extranets in SharePoint 2010

Similar to Planning and Configuring Extranets in SharePoint 2010 (20)

More from Geoff Varosky

More from Geoff Varosky (8)

Recently uploaded

Recently uploaded (20)

Planning and Configuring Extranets in SharePoint 2010