1. 1 SharePoint Saturday Charlotte @caspug #spsclt Introduction to Cloud SSA

2. 2 SharePoint Saturday Charlotte @caspug #spsclt Hiran Salvi Sr. Support Escalation Engineer Microsoft Corporation hsalvi@microsoft.com Introduction to Cloud SSA

3. 3 SharePoint Saturday Charlotte @caspug #spsclt Cardinal Solutions Thank you sponsors!!

4. 4 SharePoint Saturday Charlotte @caspug #spsclt

5. 5 SharePoint Saturday Charlotte @caspug #spsclt  SharePoint On Perm Environment with Cloud Search service application (SharePoint 2013 with August 2015 CU or higher or SharePoint 2016 Beta 1  Supported content sources SharePoint Server 2007, 2010 or 2013 Fileshares, BCS connectors*  Office 365 subscription that includes SharePoint & have Activated Users  Directory Synchronization of AD users and groups Environment with Office 365 Basic requirements Additional requirements for search previews  Reverse proxy back to on-premises WAC server

6. 6 SharePoint Saturday Charlotte @caspug #spsclt DirSync SP 2013 SP 2010SP 2007 Fileshares BCS Cloud SSA Search Index Logical architecture: crawling On-Perm Office 365

7. 7 SharePoint Saturday Charlotte @caspug #spsclt SIDS-1-5-21-1212121212- 1212121212-1212 user1@testdomain.yourcompany.co m msOnline- OnPremiseSecurity Identifier S-1-5-21-1212121212-1212121212- 1212 PUIDPUID-XXXX-XXXXXXXXXX  Security principals can be managed on-premises and synched to the cloud by using the DirSync tool.  The object in the Azure Active Directory now mirrors the object in the on-premises Active directory.

8. 8 SharePoint Saturday Charlotte @caspug #spsclt Mapping of Access Control Lists User SIDs are mapped to PUIDs Group SIDs are mapped to Object IDs «Everyone» and «Authenticated users» are mapped to «Everyone except external users»

9. 9 SharePoint Saturday Charlotte @caspug #spsclt Cloud SSA SPO Search Index Logical architecture: query On-Perm  User issues a query from Office 365.  User’s token contains online identity and group memberships.  User isues a query from a site on- premises. This sends over user’s on-prem claims to SPO  token gets rehydrated with online claims as user is authenticated against Office 365. Office 365

10. 10 SharePoint Saturday Charlotte @caspug #spsclt  If a user gets on-perm document in the search result while searching in O365, it is because user have access to the document on-premises  User must be signed into on-premises environment to open/access the actual document.

11. 11 SharePoint Saturday Charlotte @caspug #spsclt SUPPORTED  Custom IFilter  BCS connectors  Search Connectors On-premisesIn cloud(O365) NOT SUPPORTED Content that requires custom security trimming NOT SUPPORTED Site collection level schema mapping Custom security trimming Custom entity extraction Content enrichment web service  All index and query related settings are managed in SharePoint Online  For On Perm Data Crawling and parsing are managed on-premises.  For O365 Data Crawling and parsing are managed in O365

12. 12 SharePoint Saturday Charlotte @caspug #spsclt The property can be used to restrict a query for online/on-premises results, as a refiner or in a result source

13. 13 SharePoint Saturday Charlotte @caspug #spsclt Get Results for SPO only Content {searchTerms} IsExternalContent<>1 Get Results for On-Perm Only Content {searchTerms} IsExternalContent=1 Alternate way to get {searchTerms} ( Path:http://sp2010 OR Path:file://fileshare OR Path:http://sp2013/sites/testsitecoll)

14. 14 SharePoint Saturday Charlotte @caspug #spsclt Questions?

15. 15 SharePoint Saturday Charlotte @caspug #spsclt Resources