Security In Business Connectivity Services In SharePoint 2013

Posted by on Oct 16, 2012 in SharePoint Security | 0 comments

There are some types of authentication scenarios where the external system isn’t allowed to accept credentials directly from Business Connectivity Services. Yet the external system is able to accept them from 3rd parties and an authentication service that it is able to trust. That 3rd party is generally going to be a security token provider.  They will accept a grouping of information called assertions about a user. The entire grouping is called the claim, and it can have plenty of information about the person requesting it. This can extend well beyond the username and password. The...

read more

Planning Security When Migrating To SharePoint

Posted by on Sep 21, 2012 in SharePoint Security | 1 comment

This is a guest post by Benjamin Niaulin from Sharegate Planning Security when migrating to SharePoint Whether you are migrating from a shared drive or from SharePoint there will come a time where you will need to sit down and think about permissions. Many companies have specific requirements when it comes to security and permissions. When migrating to SharePoint, one step that is often looked over too fast or too late is managing permission levels and security groups. Understanding the SharePoint security basics One thing we learn quickly in SharePoint is that users will only see what they...

read more

User Profile Database Architecture In SharePoint 2013

Posted by on Sep 11, 2012 in SharePoint Security | 0 comments

When creating a User Profile service application, there are three databases offered for storing that information in SharePoint Server: Profile Database Storing user profile information Synchronization Database – Storing configuration and staging information for the profile data from external sources including AD DS. Social Tagging Database Storing social tags & notes created by users. Each of them is associated with a  specific profile ID. All three of these databases can be accessed by Team Sites, My Sites, and other sites within SharePoint. Access points depend on the User...

read more

Why Use User Profiles In SharePoint 2013

Posted by on Sep 9, 2012 in SharePoint Security | 0 comments

The fact that with SharePoint Sever 2013 the User Profile service offers a centralized location for service administrators to configure and administer features is very important to recognize. This includes: User Profiles The detailed information about people and an organization are found here. The user profile is responsible for organizing and displaying the properties that are specific to each user. There are also social tags, documents, and other related items for that user collected. Profile Synchronization This provides a reliable method for synchronizing the groups and users profile...

read more

SharePoint 2013 Planning User Profile Synchronization With Directory Services (AD DS,Novell, SJSDS)

Posted by on Sep 8, 2012 in SharePoint Security | 0 comments

Determining the synchronization connections as well as identifying the property mappings is important. You will also have to plan for the various aspects of the profiles to be synchronized, but that is very straightforward. Identifying the synchronization server is important. You will only be able to run one instance of User Profile Synchronization service on a farm. You get to decide which server you wish to use for the creation of the User Profile service application. The provisions of SharePoint Server offers a version of Microsoft called Forefront Identity manager that will be used on...

read more

SharePoint 2013 User Profile Property Mapping And Synchronizing Groups

Posted by on Sep 7, 2012 in SharePoint Security | 0 comments

For a user profile property that comes from an external system, you need to map the property for a specific attribute of the external system. The default will offer some user profile properties mapping. You will only be able to map a profile property to an attribute with data that is compatible with the data type of property. You aren’t going to be able to map SPS-HireDate user profile property to the homePhone Active Directory. This is because SPS-HireDate is a date and HomePhone is a Unicode string. For synchronizing profile information and importing profile properties from external...

read more