Downloaded 411 times
Uploaded bySPC Adriatics
Configuring SharePoint 2013 for BI scenarios
The document provides a comprehensive overview of configuring SharePoint 2013 for business intelligence scenarios, detailing the roles of user authentication, service applications, and architectural requirements for BI solutions. It discusses the transition from classic to claims authentication, outlines necessary configurations, and lists specific requirements for various BI components like Excel Services, PowerPivot, and Reporting Services. Additionally, it highlights the importance of Kerberos authentication and provides guidelines for setting up and managing these integrations effectively.
More Related Content
Similar to Configuring SharePoint 2013 for BI scenarios
![[Vončina] Configuring SharePoint 2016 for BI Scenarios](https://cdn.slidesharecdn.com/ss_thumbnails/d46etofktuacapz9mcyy-signature-d4523b3bf020616e67040d2a940ba8bf9aeab187b20da49956548f98de22ea12-poli-180606121949-thumbnail.jpg?width=640&height=640&fit=bounds)
![[DevFest Strasbourg 2025] - NodeJs Can do that !!](https://cdn.slidesharecdn.com/ss_thumbnails/devfeststrasbourg2025-nodejscandothat-251127142731-da65b6fd-thumbnail.jpg?width=640&height=640&fit=bounds)
![[BDD 2025 - Mobile Development] Mobile Engineer and Software Engineer: Are we...](https://cdn.slidesharecdn.com/ss_thumbnails/md-mobileengineerandsoftwareengineerarewestillrelevantsidiqpermana-251127010650-55224ef1-thumbnail.jpg?width=640&height=640&fit=bounds)
![[BDD 2025 - Full-Stack Development] Digital Accessibility: Why Developers nee...](https://cdn.slidesharecdn.com/ss_thumbnails/fs-digitalaccessibilitywhydevelopersneedtoknowandcarein2025-251127011019-0674441d-thumbnail.jpg?width=640&height=640&fit=bounds)
![[BDD 2025 - Artificial Intelligence] Building AI Systems That Users (and Comp...](https://cdn.slidesharecdn.com/ss_thumbnails/ai-buildingaisystemsthatusersandcompanieslove-251124030845-038f7732-thumbnail.jpg?width=640&height=640&fit=bounds)
Configuring SharePoint 2013 for BI scenarios
- 1. Configuring SharePoint 2013for BI Scenarios ROBI VONČINA, SHAREPOINT SERVER MVP KOMPAS XNET D.O.O. SHAREPOINT AND PROJECT CONFERENCE ADRIATICS 2013 ZAGREB, NOVEMBER 27-28 2013
- 2.
- 3. ROBI VONČINA MVP, MCSE,MCT • Degree in economics • Started as MS Office instructor • System administrator • I started working with SharePoint from 2003 version on • Leader of SloSPUG
- 4.
- 5. The Microsoft BIframework Personal BI Team BI Organizational BI My Context Our Context The Org’s Context BI solution created by user. Context is only for user & exists as document. BI Solution created by power user. Context is for a small team & it’s managed on a server. BI Solution created by IT, Established corporate context & is reusable, scalable and backed up.
- 6. Yesterday’s challenges • Userauthentication • Claims vs. Classic mode • Service application architecture • Inconsistencies across BI features • Identity Delegation Authentication Service Application • Constrained delegation limitations • Kerberos • Configuration • Production Support Delegation Kerberos
- 7. Today’s opportunity • Userauthentication • Claims vs. Classic mode • Service application architecture • Inconsistencies across BI features • Identity Delegation • Constrained delegation limitations • Kerberos • Configuration • Production Support
- 8. What to know •Claims authentication • Claims first design • BI architecture consistency • SQL reporting services is now a service application • Kerberos RBCD • Resource based constrained delegation across domain & forest • BISM & EffectiveUsername • SQL reporting services is now a service application
- 9. Claims in SharePoint2013 • Web applications are claims enabled by default • Classic mode authentication is now deprecated • New PowerShell commandlets to convert to claims authentication • PowerPivot, SQL reporting services, dashboard designer all work with claims enabled sites • BI service applications require windows-claims for outbound windows identity delegation • Claims-to-Windows Token Services (C2WTS) only leveraged when identity provider is Windows
- 10.
- 11. Excel Services familyrequirements Office Pro Plus license xVelocity model enabled as required SharePoint Enterprise CAL PowerPivot add-in included, must be enabled Included on SP media PowerView and-in included, enabled as needed Requires AS SP Mode for xVelocity and Power View interactivity Deploys as service application SQL Server BI or Enterprise Deploys as SQL service on independent servers Load balancing performed by Excel Services Requires AS SP Mode and Excel Services Deploys as SP Service application
- 12. Reporting Services requirements IntegratedMode Deploys as SP service application Alerting Self service subscriptions Power View Required for BISM/Power View
- 13. PerformancePoint requirements Deploys asSP service application For analytic charts/grids
- 14. Installing SharePoint BIComponents Excel Services PerformancePoint Other Stuff Reporting Services PowerPivot Analysis Services
- 15. Standard 2 serverfarm FE Profile Excel Services Search ……. DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 16. BI integration –2 server farm WFE Profile Excel Services Search ……. SSRS PP DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 17.
- 18.
- 19. Accounts • Application Pool– DEVsp2013_app_pool • Application pool account for web applications (content) • Claims to windows token service account – DEVsp2013_c2wts • Special permissions for this account on SP box • Constrained Kerberos delagation • SharePoint BI Account – DEVsp2013_bi • Constrained Kerberos delegation
- 20. Claims to WindowsToken Service $accntc2wt = Get-SPManagedAccount -Identity DEVsp2013_c2wts $farm=get-spfarm $c2wt=$farm.Services |where {$_.name -eq "c2wts"} $c2wt.ProcessIdentity.CurrentIdentityType="SpecificUser" $c2wt.ProcessIdentity.ManagedAccount=$accntc2wt $c2wt.ProcessIdentity.Update() • #Add dependency - bug cmd.exe /c "sc config c2wts depend= CryptSvc"
- 21. Claims to WindowsToken Service Permissions • Local Admin • Secpol.msc
- 22. Microsoft BI light-upstory for SharePoint 2013
- 23.
- 24. New Excel ServicesApplication $biAppPool=Get-SPManagedAccount -Identity xnetdevsp13_bi $biApplicationPool = New-SPServiceApplicationPool -Name BI_AppPool -Account $biAppPool -Verbose #Excel $ExcelServis=Get-SPServiceInstance |where {$_.TypeName -eq "Excel Calculation Services"} if($ExcelServis.status -eq "Disabled") { $ExcelServis | Start-SPServiceInstance } while(-not($ExcelServis.status -eq "Online")) { write-host -ForegroundColor Yellow $ExcelServis.status;sleep 5; $ExcelServis=Get-SPServiceInstance |where {$_.TypeName -eq "Excel Calculation Services"} } New-SPExcelServiceApplication -Name ExcelService -ApplicationPool $biApplicationPool Verbose -Default
- 25. SETUP AND CONFIGURATION AnalysisServices SharePoint mode
- 26. PowerPivot Analysis Services •Can be installed on SharePoint Server or separate server that has no SharePoint Installed • Install or Uninstall the PowerPivot for SharePoint Add-in • http://msdn.microsoft.com/en-us/library/jj218792.aspx
- 29. Instance name mustbe PowerPivot
- 32. SETUP AND CONFIGURATION ReportingServices SharePoint mode
- 33. Reporting Services 2012Architecture • SSRS is now a SharePoint service application • WFE use the SA proxy to communicate with SSRS SA machine instances • You must have the C2WTS running on each machine instance running SSRS
- 36.
- 37. Create new SSRSService Application $ssrs=get-spserviceinstance -all |where {$_.TypeName -like "SQL Server Reporting*"} | Start-SPServiceInstance $biappPool=Get-SPServiceApplicationPool Identity bi_apppool $ssrssa=New-SPRSServiceApplication -Name SSRS_Service -ApplicationPool $biappPool DatabaseName SP13_SA_SA_SSRS -DatabaseServer LSQL -Verbose New-SPRSServiceApplicationProxy -Name SSRS_Proxy -ServiceApplication $ssrssa
- 38. Change authentication type "C:ProgramFilesCommon Filesmicrosoft sharedWeb Server Extensions15WebServicesReportingrsreportserver.config„ • Enable Kerberos Auth <Authentication> <AuthenticationTypes> <RSWindowsNegotiate /> </AuthenticationTypes> <EnableAuthPersistence>true</EnableAuthPersistence> </Authentication> • IISRESET
- 39.
- 40.
- 41. SETUP AND CONFIGURATION PowerPivotfor SharePoint
- 42. spPowerPivot.msi • Install onall SharePoint Servers in farm Download Microsoft® SQL Server® 2012 SP1 PowerPivot® for Microsoft® SharePoint® from Official Microsoft Download Center http://www.microsoft.com/en-us/download/details.aspx?id=35577
- 51.
- 52.
- 53. $w = Get-SPWebApplication-Identity http://NTKBI $w.GrantAccessToProcessIdentity("devsp2013_bi")
- 54. Using PowerPivot Gallery •Use PowerPivot Gallery • http://technet.microsoft.com/en-us/library/ee637435.aspx#icons
- 55.
- 56.
- 57.
- 58. New PerformancePoint Service Application $ppsServis=Get-SPServiceInstance|where {$_.TypeName -eq "PerformancePoint Service"} if($ppsServis.status -eq "Disabled") { $ppsServis | Start-SPServiceInstance } while(-not($ppsServis.status -eq "Online")) { write-host -ForegroundColor Yellow $ppsServis.status;sleep 5; $ppsServis=Get-SPServiceInstance |where {$_.TypeName -eq "PerformancePoint Service"} } $pps=New-SPPerformancePointServiceApplication -name PerformancePoint_Service -ApplicationPool $biApplicationPool DatabaseName "SP13_SA_PerformancePoint" -Verbose New-SPPerformancePointServiceApplicationProxy -Name PerformancePoint_proxy -ServiceApplication $pps -Default -Verbose
- 60. Install update • MicrosoftSQL Server 2008 Analysis Services ADOMD.NET • http://go.microsoft.com/fwlink/p/?linkid=160390
- 61.
- 62. Single server withBI FE Profile Indexer Search Metadata Excel Services …. SSRS SharePoint Foundation SQL Server Server OS PP
- 63. 2 server farmwith BI WFE Profile Excel Services Search ……. SSRS PP DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 64. Separate roles Profile Excel Service s FE Search ……. SSRS Analysis Services– SharePoint Mode PP SharePoint Foundation SharePoint Foundation Server OS Server OS DB SSA S SQL Server Server OS SSIS SQL Server Server OS
- 65. BI integration –mixed roles FE Profile Crawl Metadata Excel Services SSRS PP SSS SharePoint Foundation Server OS Search SharePoint Foundation SQL Server Server OS DB SSA S Analysis Services – SharePoint Mode SSIS SQL Server Server OS Server OS
- 66. Scaling the BIServices Reporting Services Add Reporting Services – SharePoint to all application servers Add Reporting Services Add-In to all front end servers (+) xVelocity/Analysis Services/PowerPivot Install on standalone server for AS/SP Install on application server for both Separate PowerPivot Add-in available as a download (SQL Feature Pack) http://www.microsoft.com/en-us/download/details.aspx?id=34702
- 67.
- 68. SharePoint service applications Web Application Service Application Proxy Machine Instance Application Servers (machine instance) ServiceInstance C2WTS WF E All BI applications are SharePoint service applications
- 69.
- 70. The Claims toWindows Token Service (C2WTS) UPN
- 71. C2WTS Service SSRSExample C2WTS S4U Logon SAML Kerb AD SSRS SAML Kerb Claims Bob Kerberos SAML Windows Claims WFE APP SQL
- 72. C2WTS Implications onWindows 2008 Act as operating system Requires Constrained Delegation
- 73. Kerberos • Use DNSA records for SharePoint portal • Alias/CName does not work
- 74. Kerberos • Create SPNs SETSPN SETSPN SETSPN SETSPN SETSPN -S -S -S -S -S MSSQLSvc/L-SQL.dev.local:1433devsql_admin MSSQLSvc/L-SQL:1433 devsql_admin MSSQLSvc/L-SQL.dev.local devsql_admin MSOLAPSvc.3/L-SQL.dev.local devsql_analysis MSOLAPSvc.3/L-SQL devsql_analysis SETSPN -Q HTTP/NTKBI SETSPN -L devsp2013_app_pool SETSPN -S HTTP/NTKBI devsp2013_app_pool SETSPN -S HTTP/NTKBI.dev.local devsp2013_app_pool SETSPN -S SPBI/C2WTS devsp2013_c2wts SETSPN -S SPBI/BI devsp2013_BI SETSPN -X
- 75. Kerberos • Set updelegation for NTKBI app pool
- 76.
- 77. Kerberos • Verify SharePointconnects to SQL with Kerberos Select s.session_id, s.login_name, s.host_name, c.auth_scheme, c.connect_time from sys.dm_exec_connections c inner join sys.dm_exec_sessions s on c.session_id = s.session_id ORDER BY c.connect_time DESC
- 78. Kerberos • Verify Kerberoson Windows client using • Klist • Klist purge
- 79. Configure Kerberos forPPS, Excel, Visio, C2WT
- 81.
- 82. Windows 2012 KerberosImprovements Large Tickets Claims FAST Armoring RBCD SetSPN And More… KDC Proxy KDC Events Operations Logs Performance Counters http://technet.microsoft.com/en-us/library/hh831747.aspx
- 83. “EffectiveUserName” • EffectiveUserName • AnalysisServices Feature • Pass EffectiveUserName in connection (security context) • Requires caller have Admin rights in Analysis Services • RSDS Implements EffectiveUserName
- 84. BI Semantic Model(BISM) BIS M
- 85. Health Analyzer • GoodTool, but too many false positives • PowerPivot has special rules • Correct the real problems, disable the others • How to • http://whitepages.unlimitedviz.com/2012/06/the-health-analyzer-andpowerpivot-for-sharepoint/
- 86. Office Web Apps •New-SPWOPISuppressionSetting • http://technet.microsoft.com/en-us/library/jj219443.aspx
- 87.
- 88. thank you. SHAREPOINT ANDPROJECT CONFERENCE ADRIATICS 2013 ZAGREB, NOVEMBER 27-28 2013
Editor's Notes
- #13 The xVelocity in-memory analytics engine is the next generation of the VertiPaq™ engine that was introduced in SQL Server 2008 R2, with PowerPivot for Excel 2010 and PowerPivot for SharePoint 2010. Vertipaq™ is an in-memory columnstore engine that achieves breakthrough performance for analytic queries by employing techniques such as columnar storage, state-of-the-art compression, in-memory caching and highly parallel data scanning and aggregation algorithms. In SQL Server 2012, the xVelocity in-memory analytics engine has been enhanced to support both self-service BI (PowerPivot) as well as corporate BI (Analysis Services tabular mode) scenarios.The xVelocity engine has two usage scenarios in the context of Business Intelligence:Information workers can use PowerPivot for Excel to integrate data from a number of sources, cleanse and model the data, enrich the data with business logic, analyze the data and build reports and visualizations. Since PowerPivot uses the xVelocity engine under the covers, information workers are not limited by the restrictions of Excel. They can work with several millions of rows of data and still benefit from split-second response times.BI developers and IT professionals can use SQL Server Data Tools to create an Analysis Services Tabular project and build a BI Semantic Model. The model can contain data from a number of sources, business logic expressed in the form of DAX calculations, role-based security and large data volumes that can be managed using partitions in the xVelocity engine. When the model is deployed to an Analysis Services server, information workers can use tools like Excel and Power View to interact with the model and achieve split-second response times from the xVelocity engine.