8/1/2018 5:43 AM BRK3003 Collaborate outside the firewall with Office 365 - Cross-org Collaboration (B2B) SharePoint Online, OneDrive for Business, Skype for Business, Exchange Online Sesha Mani, Principal Program Manager Jeffrey Zhu, Program Manager Tony Hernandez, Program Manager © Microsoft Corporation. All rights reserved.

Agenda What is O365 B2B (Business-to-Business) Cross-Org Collab 8/1/2018 5:43 AM Agenda What is O365 B2B (Business-to-Business) Cross-Org Collab SPO/ODB Business-to-Business (B2B) Collab SharePoint Hybrid with B2B Sites Exchange Online & Skype for Business © Microsoft Corporation. All rights reserved.

8/1/2018 5:43 AM What is Office 365 Business-to-Business (B2B) Cross-org Collaboration ? © Microsoft Corporation. All rights reserved.

Empower your Workforce – beyond your Org boundary Microsoft Lync 8/1/2018 Empower your Workforce – beyond your Org boundary Bring your extranet to life with social, mobile, and business data Get more done across your workforce, partners, suppliers Suppliers Fabrikam Vendors Adatum Freelance Contoso Corporation Consultants Partners North Wind Give your business partners a voice and encourage them to make a difference Innovate and adapt in a world of constantly changing business needs © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

O365 Business-to-Business (B2B) Cross-organization collaboration “I need to collaborate with my partners, with no custom solutions infrastructure but with governance.” SITES-DOCS CALENDAR Skype

O365 B2B Empowers Basic Productivity for your Business Partners within your Tenant … SharePoint OneDrive Calendar Skype IM Project Online Office 365 B2B External B2B User Lifecycle O365 Apps O365 Compliance Reporting Azure Active Directory

O365 B2B – Value Props to your Business Microsoft Ignite 2015 8/1/2018 5:43 AM Expand your business partnerships with no concerns about expanding infrastructure $$$-Save on set up costs Collaborate with your partners as if they are your own users Suite-wide capabilities for your partners No compromise in experience and security Auditing, reporting and control simple | secure | connected partnerships © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

B2B Cross-org Collaboration - Principles Simple Connected Secure Simple Configuration Simple Sharing Controls Simple Mobility Audit & lifecycle Restricted domains sharing No hole in on-premises firewall One Sites Tile for all Corp users any access Suite wide capabilities

What is SPO/ODB Business-to-Business (B2B) Collaboration & Scenarios 8/1/2018 5:43 AM What is SPO/ODB Business-to-Business (B2B) Collaboration & Scenarios © Microsoft Corporation. All rights reserved.

SPO Extranet Sites for B2B Cross-Org Partners Simple & Secure SPO Business-to-Business Collaboration - Scenario Patterns 1. Disabled “Most restricted” 2. Admin Managed Partner Users “SPO Hybrid B2B” “Restricted” 3. Allow List of Partner Domains “Restricted Domains Sharing” “Moderately restricted” 4. Deny List of Partner Domains ”Restricted Domains Sharing” “Medium restricted” 5. Any partner domains or emails “Open Invitations Model” “Less restrictive” 6. Anonymous links ”Open for Anonymous” “No restriction” Most Restrictive No Restriction SPO Extranet Sites Open for Any Externals SPO Intranet Sites SPO Extranet Sites for B2B Cross-Org Partners

8/1/2018 5:43 AM Simple Secure What if you want to control the sharing only to specific B2B Partner Domains and let your Users invite within that boundary? “Users Invitations w/ IT Admin Restricted Domains” Scenario © Microsoft Corporation. All rights reserved.

O365 SPO B2B – Scenario: “User Invitations w/ IT Admin Restricted Domains” Bonus Scenario: IT Admin enables Site-owners only sharing Scenario: IT Admin manages Allow/Deny List Contoso (Customer) Azure AD Office 365 Adatum (Partner, Adatum.com) Azure AD Office 365 (Optional) Allow List: Adatum.com Fabrikam.com B2B Opt-in O365 On-premises melissa@adatum.com peter@contoso.com Fabrikam (Partner, fabrikam.com) (on-premises) ADFS AD Local user: melissa@fabrikam.com

Demo Time: “User invitations with IT Control” 8/1/2018 5:43 AM Demo Time: “User invitations with IT Control” © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IT Admin Configures ‘Restricted Allow Domains List’ End User when trying to share outside of allowed domains

8/1/2018 5:43 AM Simple Secure What if you want further control the sharing only to specific B2B Partner Users that you may manage already? “Admin Managed B2B Guests” Scenario © Microsoft Corporation. All rights reserved.

O365 SPO B2B – Scenario: “Admin Managed B2B Guests” Scenario: Allow sharing only with Admin Managed B2B Guests Bonus Scenario: IT Admin enables Site-owners only sharing Scenario: “AAD B2B” Bulk Invite Users Contoso (Customer) Azure AD Office 365 Adatum (Partner) Azure AD melissa@adatum.com Email: Melissa@Adatum.com O365 peter@contoso.com Federation SSO trust On-premises Directory Sync ADFS Contoso (on-premises) Fabrikam (Partner) (on-premises) brad@fabrikam.com Email: brad@Fabrikam.com AD Active Directory Local users

Demo Time: “Admin Managed B2B Guests” 8/1/2018 5:43 AM Demo Time: “Admin Managed B2B Guests” © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What B2B Guest Users Can & Can’t do in SPO? They Can Not… They Can… Can’t Access all sites in the tenant, only authorized sites. Can’t Enumerate all local and other B2B guests in directory. Can’t Invite other B2B partner users randomly. Can’t Have OneDrives if using ‘external’ identities. Can’t have EXO mailboxes. Can Access only designated B2B Sites they authorized for. Can Add/Edit docs within the B2B Site they authorized for. Can Have Profile with basic information. With SPO License, they can create Sub-sites. melissa@contosopartner.com (OR) Melissa@Adatum.com

Auditing & Reporting: Always on the know-how of who sends B2B Invitations to whom and when O365 Compliance Reports include an Auditing of Invitations and Access Requests specific events For Example: ‘Created sharing invitation’ event shown below indicates ‘who’ shared with ‘whom’ and ‘which’ site/doc and ‘when’ shared.

Auditing & Reporting: Always on the know-how of what activities your external business partner user did in your tenant O365 Security & Compliance Reports include ‘Audit log search’ capability allowing to see ‘All Activities’ for a given user in your tenant. For Example: ‘All activities’ event with filter of ‘Melissa Kwan melissa_adatumautos.onmicrosoft.com…’ shows all the activities of this guest.

User Lifecycle: Business partnership ends User Lifecycle: Business partnership ends? Optionally, Delete the user from all accesses but keep the audit trail O365 Portal Admin Center – Select the external user and DELETE. (OR) Using Azure Active Directory Powershell Module, programmatically Delete the external b2b user.

Single place to learn on SPO B2B tech… http://aka.ms/spb2b

Customer Success Story: Johnson Controls on SPO B2B Microsoft Ignite 2016 8/1/2018 5:43 AM Customer Success Story: Johnson Controls on SPO B2B Johnson Controls adopted O365 SharePoint Online for their business-to-business collaboration needs. 200K+ business partner users 200+ SPO extranet site collections Johnson Controls (JCI) Veera Chiranjeevi Manager, Collaboration Solution Architecture Johnson Controls © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

SharePoint Hybrid Extranet Scenario Connected SharePoint Hybrid Extranet Scenario

Hybrid Sites features and Search Connect the power of O365 Extranet to your on-premises today with hybrid sites features No need to migrate Avoid building complex on-premises infrastructure Simply connect and extend

“SharePoint Hybrid Extranet” 8/1/2018 5:43 AM Demo Time: “SharePoint Hybrid Extranet” © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Exchange Online & Skype for Business Connected Exchange Online & Skype for Business

Exchange Online Calendar Sharing Managed from Office 365 Admin center or Exchange admin center Options include: Allowing sharing only to specific domains Allow sharing to any domain Publishing calendar for people not on Exchange or Exchange Online (aka Anonymous)

Exchange Online – User experience EXO Free/Busy Calendar IW Experience Peter@Contoso shares his Free/Busy calendar with melissa@adatum.com, optionally full details or limited details or availability only. Note: Admin has adatum.com is in Contoso’s AllowList and configured a F/B sharing policy.

EXO Calendar Sharing – Improved Experience Shared calendars will now sync to mobile devices, or any other application you use to access your mailbox Updates sync instantly within your tenant Sharing setup is being simplified so that it’s consistent across all Outlook clients (and adding it to Mobile) Learn More at Theater session: THR2017R, Thurs 3:35pm - 3:55pm, Room Building B Theater – Floor 2

SFB Tenant Admin Center Enable ‘AllowList/DenyList’ at Tenant Level ‘organization’ setting SFB Tenant Admin Center Choose Presence privacy mode

To summarize… Simple Connected Secure Office 365 offers cross-org collaboration experience to help you achieve more with B2B Partners Significant controls for admin to govern SharePoint Online Sites external sharing SharePoint Hybrid seamless sites navigations Improved Calendar sharing in Exchange Online Simple Connected Secure

Other Ignite Sessions to watch … Fri 9/30 10:45 AM to 12:00 PM BRK3108 Azure Active Directory B2B Room C111 Wed 9/28 12:45 PM – 1:30 PM BRK3250 Collaborate outside the firewall with Office 365 Groups Room C101

Other Ignite Sessions Day & Time slot Session Code Title Room Mon 9/26 2:15 – 3:30 PM BRK1025 Learn how SharePoint is reinventing content collaboration: vision and roadmap updates Thomas Murphy Ballroom Tue 9/27 12:30 – 1:45 PM BRK3107 Connect your on-premises directories to Azure AD and use one identity for all your apps Georgia Ballroom Tue 2:15 – 3:30 PM BRK2050 Dive into Microsoft O365 and SharePoint Hybrid Scenarios B302-B303 Tue 9/27 11:05 – 11:25 AM Thu 9/29 3:35 – 3:55 PM THR2017 Improve shared and delegated calendar experiences in Microsoft Outlook Tue: Microsoft Theatre 4 Thu: Bldg B Theatre – Level 2 2:00 – 2:45 PM BRK1043 Get started with Hybrid SharePoint Online and OneDrive for Business with FastTrack B211-B212 Thu 9/29 4:00 to 5:15 PM BRK3038 Explore New SharePoint Hybrid Scenarios – Hybrid Auditing, Hybrid Taxonomy, Hybrid App Launcher Thomas Murphy Ballroom 1 12:30 – 1:15 PM BRK3003 Collaborate outside the firewall with Office 365 (this session) B405-B407 Wed 9/28 12:45 – 1:30 PM BRK3250 Collaborate outside the firewall with Office 365 Groups Room C101 Fri 9/30 10:45 AM to 12:00 PM BRK3108 Azure Active Directory B2B Room C111

THANK YOU !

Empower your Workforce – beyond your Org boundary Microsoft Lync 8/1/2018 Empower your Workforce – beyond your Org boundary Bring your extranet to life with social, mobile, and business data Get more done across your workforce, partners, suppliers Suppliers Fabrikam Vendors Adatum Freelance Contoso Corporation Consultants Partners North Wind Give your business partners a voice and encourage them to make a difference Innovate and adapt in a world of constantly changing business needs © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

O365 B2B Opt-in Steps SPO Tenant Admin: Enable external sharing at Tenant/Site Collections level SPO Tenant Admin: Configure AllowList/DenyList at tenant level SPO Tenant Admin: Configure disable non-owners to invite new users for B2B Sites SPO Site Owners: (Optional) Enable access requests approval workflow for B2B Sites EXO Tenant Admin: Organizations tab configure AllowList/DenyList EXO Tenant Admin: Configure Free/Busy Calendar sharing policies SfB Tenant Admin: Configure AllowList/DenyList at tenant level O365 Reporting: Ensure compliance auditing/reporting is enabled Note: All the above steps are optional, depending on your business need you can choose the resource to allow for external sharing.

Resources SharePoint Business to Business Collaboration:  Extranet for Partners with Office 365 Restricted Domains Sharing in Office 365 SharePoint Online and OneDrive for Business  (New feature recently rolled out WW) Create a partner-facing Extranet SPO site in Office 365  (New feature recently rolled out WW) Manage External Sharing for your SPO environment EXO: Calendar sharing with external users Organization Relationships in Exchange Online Externals in Skype for Business

Deploy, ramp-up on new services and onboard new users with Microsoft FastTrack: http://fasttrack.microsoft.com/

Join the Microsoft Tech Community to collaborate, share, and learn from the experts: http://techcommunity.microsoft.com

Please evaluate this session 8/1/2018 5:43 AM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.