Even if you use SharePoint On premices, Hybrid is more and more in the DNA of Microsoft product. In SharePoint 2016, this way to consume and integrate external services will be part of the default architecture. If you don’t look at that yet or if you want to be sure to get all the details about new configuration option, we will give you a fully detailed configuration trail from Azure Services to SharePoint On Premices and Online. During this session you will: - Learn why Hybrid is so important - Discover how to setup Azure AD Services and be sure to get all the details about Identity management - Learn how to setup Office 365 Hybrid using the new Hybrid Picker option - Learn how to connect correctly SharePoint 2013 and 2016 to get Sites and hybrid services - Speculate with us what will be the next step in Hybrid RoadMap

1. LEVEL 100
SharePoint and Office 365
Hybrid Configuration
from A to Z
JAN
12 SharePoint Saturday Virginia Beach #SPSVB
Nicolas Georgeault
Senior Architect, MuBrain Inc.
#PowerApps

3. Immediately following SPSVB Closing
Some appetizers will be provided
ATC

4. About me
• Founder and PPM @MuBrain Inc.
• 20 years of experience in KM
• 12 years with Microsoft SharePoint
• Microsoft Specialist and Partner
• MVP for 8 years
• Machine Leaning certificate from Stanford
University
• Co-author of books about SharePoint
• Mad about Jazz music and HorseBall

5. #CollaborateCanada
Objectives
• Learn why Hybrid is so important
• Discover how to setup Azure AD Services and be sure to get all the
details about Identity management
• Learn how to setup Office 365 Hybrid using the new Hybrid Picker
option
• Learn how to connect correctly SharePoint 2016 and 2019 to get Sites
and hybrid services

6. #CollaborateCanada
Why it is so
important?
Hybridization is the result
of mixing two animals or
plants of different
breeds, varieties, species
or genera.

9. #CollaborateCanada
So… Why it is so important?
• Users have to deal with multiple…
…Services
• So they usually have multiple…
…Identities
• And we want to guaranty…
…Contextualization

10. #CollaborateCanada
Identity crisis

11. #CollaborateCanada
Cloud identity

12. #CollaborateCanada
Directory and password sync (AD connect)

13. #CollaborateCanada
AD FS

14. Azure AD Connect
How to keep your identities connected
and synchronized

15. #CollaborateCanada
Deployment Steps
Required Tools
• Active Directory Connect - Link
• Azure Active Directory Module for Windows PowerShell – Link
• SharePoint Online Management Shell – Link

16. #CollaborateCanada
Pre-Requisites

17. #CollaborateCanada
SP Service Applications
Following your scenarios:
• Secure Store
• User Profile Service
• App Management Service
Application
• Search Service Application
• Business Data Connectivity

18. #CollaborateCanada
Domains
• Verify the internal AD domain name with Office 365 – Needs to be a routable
domain!
• Enables Microsoft to verify that you “own” the domain
• If you are using a non-routable domain (.local) for AD – all is not lost!
• Verifying a domain increases the Office 365 object limit from 50K to 300K!

19. #CollaborateCanada
Domain
Infrastructure Pre-Requisites – Verify Internal Domain
• In my environment the AD domain is mubrain.com which is routable!
• But if it was mubrain.local, I would had to associated it with my domain mubrain.com
by adding a UPN Suffix
• And update user accounts to use the gouv365.com domain

20. #CollaborateCanada
Active Directory
Infrastructure Pre-Requisites – Active Directory
• AD domain must be at least Windows Server 2003 Forest Functional Level
• Run IdFix to identify objects that could cause sync issues and remediate
• Illegal characters
• Duplicate entries
• Length
• …

21. #CollaborateCanada
Setting up AD
Connect

22. #CollaborateCanada
DEMO
Setting up Domain and Azure AD Connect.
• Install and configure the AD Connect tool –
Link
• Assign user licenses in Office 365

23. #CollaborateCanada
Deployment Steps
Additional Considerations
• For greater control over the attributes that are synchronised to Azure AD
select Azure AD app and attribute filtering
• Password write-back requires Azure AD Basic or Premium

24. #CollaborateCanada
Deployment Steps
Checking Directory Synchronisation

25. #CollaborateCanada
Deployment Steps
Directory Synchronisation – Notification e-mail

26. #CollaborateCanada
Deployment Steps
Assigning Licenses for the portal or using PowerShell
• Licenses all users with a Username (UPN) of *.mubrain.com
• Also sets their location to CA
Set-MsolUserLicense -UserPrincipalName "<Account>" -AddLicenses "<AccountSkuId>“
#Add Licences
$Users = Get-MsolUser | Where {$_.UserPrincipalName –like “*@mubrain.com”}
Foreach ($User in $Users)
{
Set-MsolUser –UserPrincipalName $User.UserPrincipalName –UsageLocation CA
Set-MsolUserLicence –UserPrincipalName $User.UserPrincpalName –AddLicences “gouv365:ENTERPRISEPACK”
}

27. Hybrid Picker?!
Setup your Hybrid mode following most
used scenarios

28. #CollaborateCanada
Existing scenarios
• Hybrid OneDrive
• Hybrid Sites Features
• Hybrid App Launcher
• Hybrid Extranet Business to Business sites
• Hybrid Auditing
• Hybrid Taxonomy

29. #CollaborateCanada
Dive into Office 365 and SharePoint
hybrid scenarios (Microsoft Ignite 2017)
https://channel9.msdn.com/Events/Ignite/Microsoft-Ignite-Orlando-2017/BRK2225

30. https://www.hyperfish.com

31. #CollaborateCanada
Any Question?
31

33. Immediately following SPSVB Closing
Some appetizers will be provided
ATC