Johnathan Lightfoot | SharePoint Architect Going Hybrid Johnathan Lightfoot | SharePoint Architect

Johnathan Lightfoot ‏@exnav29 SharePoint Architect SharePoint 2010/2013/2016/Online/Office365/Artificial Intelligence and Bots Microsoft Certified Trainer (Alumni) Developing solutions for the enterprise which move them forward! Brief Experience SharePoint, Office365 ad Bot Framework My SharePoint journey started in 2006, never looked back Co-wrote three books on SharePoint (Plain & Simple 2010 and 2013, SharePoint Foundation 2010 Inside Out) I love Star Trek and move to make the technology and processes in that world reality.

Course Expectations Target Audience and Suggested Prerequisites Intermediate Level IT Professional Experience running an established SharePoint Farm Have done at least two SharePoint Installations and/or Upgrade Have some experience using PowerShell High Level Learning Outcome A mix of discussion and demos that can easily be referenced from this recording Become familiar with SharePoint Solution Upgrades and Hybrid Implementation Be familiar with content being tested in exam 70-339 (Managing Microsoft SharePoint 2016)

Course Topics Modules 01 | Plan Hybrid OneDrive for Business 02 | Plan Server-to-Server Authentication 03 | Plan for Hybrid Features 04 | Plan Cloud Hybrid Search for SharePoint 05 | Plan for Kerberos Support for Service Applications

01 | Plan Hybrid OneDrive for Business

Module Overview Introduction Configure Office 365 for SharePoint Hybrid Set up SharePoint Services for Hybrid Environments Redirect OneDrive for Business Users to Office 365 Quick Test

Plan Hybrid OneDrive for Business - Introduction OneDrive for Business can be integrated into SharePoint Best of both worlds Still use on-premise SharePoint 2016 Personal storage in in the cloud Use OneDrive for Business in Office 365 Key/important business files on-premise. Personal documents in the cloud

OneDrive for Business Benefits for Users User can: Store personal documents in the cloud Available even when not accessing corporate network Access files on Windows Phone iPhones Tablets Etc. Share and collaborate on documents with internal and external users Guest links

OneDrive for Business Benefits for IT Pros Provide Cloud Storage for users Add additional storage in 25 – 100 GB increments Still provide features through on-premise SharePoint

Configure Office 365 for SharePoint Hybrid Sign up for Office 365 Register your domain with Office 365 Must register a public domain that you own in Office 365 https://support.office.com/en-us/article/Add-users-and-domain-with-the-setup-wizard-6383f56d- 3d09-4dcb-9b41-b5f5a5efd611 Assign UPN domain suffixes Must create a User Principal Name (UPN) domain suffix i.e. contoso.com Synchronize accounts with Office 365 AD DS must be synchronized with Office 365 Directory Synchronization with password synchronization Directory Synchronization with Single Sign-On (SSO) TechNet Article – Office 365 Integration with on premise environments Assign licenses to your users

Set up SharePoint Services for Hybrid Environments Services such as My Sites, User Profiles and Managed Metadata can be set up for hybrid environments. Hybrid Search, Business Connectivity Services (BCS) and OneDrive for Business require the following: Managed Metadata Service Application User Profile Service Application My Sites * Extensive configuration not needed. These services are all that is needed to be running for OneDrive for Business

Set up SharePoint Services for Hybrid Environments Demo Set up SharePoint Services for Hybrid Environments

02 | Plan Server-to-Server Authentication

Module Overview Introduction Plan web application configuration for hybrid server-to-server authentication Extend an existing web application to connect to an existing content database. Create a new web application and a new content database

Introduction Outbound requests to SharePoint Online can be made from any web application in the on- premises SharePoint farm that uses Integrated Windows authentication using NTLM Plan server-to-server authentication - https://technet.microsoft.com/en- us/library/dn607307(v=office.16).aspx

Plan web application configuration for hybrid server-to-server authentication Web Application must use Integrated Windows authentication using NTLM

Extend an existing web application to connect to an existing content database. Creates a new website in Internet Information Services (IIS) with a unique URL and authentication configuration. The extended web application can be used to access the same site collections and content as the original web application by using the new URL. Best choice if you want users to go to an enterprise search portal in an existing site collection to use hybrid search.

Create a new web application and a new content database This creates a new web application new, empty content database in which you can create a new site collection with an enterprise search portal. Best choice if you want an enterprise search portal in a new site collection to use hybrid search.

Remember Integrated Windows authentication using NTLM is required to allow the SharePoint Authentication service to pass user claims to SharePoint Online using OAuth.

03 | Plan Hybrid Features

Module Overview Introduction Configure Hybrid Site Features Configure Office 365 for SharePoint hybrid Set up SharePoint services for hybrid environments Run Hybrid Picker

Introduction Helps companies get started in the cloud, Allows exploration of cloud functionality at own your own pace. Allows universal connectivity from almost anywhere to resources and content. Office 365 and SharePoint Server by default there's no integration between the two. With SharePoint hybrid features, you can tie the two environments together in a variety of ways to make a more seamless user experience.

Configure Hybrid Site Features Follow the Roadmaps Configure hybrid OneDrive for Business – roadmap (https://technet.microsoft.com/en- us/library/mt147425(v=office.16).aspx ) Configure hybrid sites features – roadmap (https://technet.microsoft.com/en- us/library/mt346110(v=office.16).aspx ) Configure cloud hybrid search – roadmap (https://technet.microsoft.com/en- us/library/dn720906(v=office.16).aspx ) Follow the steps in order No need to redo a step if you previously did it for another Roadmap

Configure Office 365 for SharePoint hybrid Sign up for Office 365. Register your domain with Office 365. Assign UPN domain suffixes. Synchronize accounts with Office 365. Assign licenses to your users.

Set up SharePoint services for hybrid environments Some SharePoint Server 2016 services can be challenging to deploy and require a lot of planning. These services are also all required to run hybrid scenarios: My Sites User Profiles Managed Metadata If you plan to make use of these services in depth, highly recommended that you follow the detailed planning guidance documents in TechNet. Other services such as hybrid Search require several services to be running in SharePoint Server 2016, but they do not require them to be extensively configured. My Sites - https://technet.microsoft.com/en-us/library/cc262500(v=office.16).aspx User Profiles - https://technet.microsoft.com/en-us/library/jj219651(v=office.16).aspx Managed Metadata - https://technet.microsoft.com/en-us/library/ee424402(v=office.16).aspx

Run Hybrid Picker Hybrid Picker is a wizard that can be downloaded to your SharePoint Server from Office 365. Helps automate certain configuration steps needed to connect your on-premises SharePoint Server environment with SharePoint Online in Office 365. Hybrid Picker wizard is your assistant, designed to do some of the work for you. Use the Hybrid Picker wizard to: redirect OneDrive for Business to SharePoint Online leverage hybrid site features or app launcher add some extra integration between on-premises SharePoint Server and an extranet site made in Office 365. Hybrid Picker also creates a Server-to-Server (S2S)/OAuth connection for your SharePoint Hybrid features.

Prerequisites to run the Picker The following are the general requirements to run the Hybrid Picker. You must be: A member of the Farm Administrators group A service application administrator (Full Control) for the User Profile Service An Office 365 Global Administrator or a SharePoint Online Administrator Logged into Office 365 and SharePoint Server from a server in your SharePoint Server farm Able to launch the Hybrid Picker as a Farm Administrator with elevated permissions

Running the Hybrid Picker Log on to the console of a SharePoint Server 2016 farm server as a farm administrator. From the farm server, connect to Office 365 as a global administrator. On the App Launcher, choose Admin. In the left pane, under Admin, click SharePoint. In the left pane of the SharePoint admin center, click configure hybrid. Follow the prompts in Hybrid Picker to configure your hybrid features

04 | Plan Cloud Hybrid Search for SharePoint

Module Overview Introduction What search experiences do your users need? Plan your search architecture in SharePoint Server for cloud hybrid search Decide how to manage crawling of your on-premises content Decide how to synchronize Active Directories Does your organization have on-premises content that’s sensitive?

Introduction Don’t go it alone EA Customers reach out to your Account Representatives Microsoft Partners Get training and certified Setting up cloud hybrid search for SharePoint requires careful planning: highly reliable Secure scalable These are required to have a successful cloud hybrid search solution. TechNet Article Plan Cloud Hybrid Search for SharePoint - https://support.office.com/en- us/article/Plan-cloud-hybrid-search-for-SharePoint-33926857-302c-424f-ba78- 03286cf5ac30#bkmk_learn_search_topo_cloud_hybrid_search TechNet Article Plan Cloud Hybrid Search for SharePoint - https://support.office.com/en-us/article/Plan-cloud-hybrid-search-for-SharePoint-33926857-302c-424f-ba78-03286cf5ac30#bkmk_learn_search_topo_cloud_hybrid_search

What search experiences do your users need? When you've set up cloud hybrid search and a full crawl of the on-premises content has completed, the Search Center in Office 365 automatically displays hybrid results from your Office 365 index. Do your users need other types of search? Search Verticals - narrow search results to a specific set of content (i.e. videos) Site Search Performance E-Discovery Cross-site publishing

What search experiences do your users need? How do you want to display Search Results? Previews Office 365 content has previews automatically. On-Premise SharePoint 2016 content needs to have an Office Web Apps (OWA) farm set up. Custom Security Trimming – Not supported in SharePoint Online in Office 365 Which Search Features do you Need? Best Bets - Use query rules in SharePoint Online in Office 365 instead. Custom Search Scopes - Use result sources in SharePoint Online in Office 365 instead. Promotion/Demotion of search results - Use result sources in SharePoint Online in Office 365 instead. Removal of on-premises search results - Don't use “Index Reset” option for a cloud Search service application. Multi-tenancy on SharePoint Server 2013 or SharePoint Server 2016 farm Custom entity extraction Content enrichment web service Thesaurus

Plan your search architecture in SharePoint Server for cloud hybrid search How much on-premises content can I index in Office 365? For each 1 TB of pooled storage space your tenant has in SharePoint Online, you can index 1 million items of on-premises content in the search index in Office 365. Your quota is by default limited upwards to 20 million items. If needed, contact Microsoft Support to increase this threshold. What size cloud search architecture do I need? What hardware requirements should I be aware of for cloud search architecture? Choose to run servers physically or virtually Choose Hardware Resources for the host servers for cloud hybrid search Plan storage performance for cloud hybrid search Learn about search topology for cloud hybrid search

Decide how to manage crawling of your on-premises content The guidance for managing crawling for on-premises only search also applies to cloud hybrid search. Manage crawls using content sources scheduling crawls crawl rules

Decide how to synchronize Active Directories There are two methods to synchronize Active Directories: Directory synchronization with password synchronization Directory synchronization with single sign-on (SSO) Security Groups with the attribute IsCriticalSecurityObject=true is excluded from synchronization. Domain Users group is one of these groups.

Does your organization have on-premises content that’s sensitive? Sensitive Content Regulatory Legal Geopolitical constraints In some cases, it’s prohibited to add metadata from sensitive on-premises content to the Office 365 search index. In other cases, metadata from sensitive on-premises content can be added to the Office 365 search index, but only a limited number of users are allowed to open search results from the sensitive content.