SharePoint Authentication and Authorization

•

4 recomendaciones•3,402 vistas

No matter which project, client or product you work with, there will always be a need to authenticate and authorize users into the solution. Historically, SharePoint has not always been the easiest platform to use for this, but now with the advent of SharePoint 2010, this changes the game. In this session, we will look at the array of out-of-the-box approaches. Using a real-world business requirement, we will use the Windows Identity Foundation to create a trusted identity provider that will allow for single sign-on between other SharePoint sites. We will also perform the SharePoint configuration to implement this with the standard out-of-the-box security of SharePoint to ensure authentication and authorization is completed easily. Using this technology, you will be able to see how SharePoint 2010 is more than capable of authenticating and authorizing users from any line of business or custom authentication store. By the end if this session, you will be able to identify the many authentication approaches, as well as when to use a specific type of authentication or authorization within your solutions.

Scott
Hoag

ciphertxt

Dan
Usher

usher

Jason
Himmelstein

sharepointlhorn

introductions

a few ground rules…

Security

http://xkcd.com/109/

authorizing
authority

authority
authority

authority

http://go.spdan.com/cba

http://go.spdan.com/claimsencoding

ASP.NET Authentication

Source: http://go.spdan.com/iisauth

Identity Provider SharePoint 2010
Security Token Service aka RP
aka IP-STS

1. Resource Requested
2. AuthN Request / Redirect
3. AuthN Request
4. Security Token
5. Security Token Request
6. Service Token
7. Resource Request w/Service Token
8. Resource Sent

Side Story

SharePint Anyone?

https://sts.domain.com

Web Application / Site Collection Anonymous

Secured Site / Site Collection / Content
Authentication

Content Repository
Is In Site Group?
Content

Does user have claim attribute?

Real World

Questions / Evals

jase@sharepointlonghorn.co
dan@spdan.com m
@usher @sharepointlhorn
www.sharepointdan.com www.sharepointlonghorn.com

Scott.hoag@spdelta.com liamcleary@msn.com
@ciphertxt @helloitsliam
http://psconfig.com www.helloitsliam.com

Más contenido relacionado

Similar a SharePoint Authentication and Authorization

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Here you can find the slides that accompany my “SPA Secure Coding Guide”, this presentation go through a set of security best practices specially targeted towards developing Angular applications with ASP.Net Web Api backends. It comes with a WebApi example project available on GitHub that provides several code examples of how to defend yourself. The example app is based on the famous "Tour of Heroes" Angular app used throughout the Angular documentation. It first introduce general threat modelling before explaining the most current type of attacks Asp.Net Web API are vulnerable to . It is designed to serve as a secure coding reference guide, to help development teams quickly understand Asp.Net Core secure coding practices.

Spa Secure Coding Guide

Spa Secure Coding Guide

Spa Secure Coding Guide

Geoffrey Vandiest

Intrigue Core: Scaling Assessment Automation

Intrigue Core: Scaling Assessment Automation

Intrigue Core: Scaling Assessment Automation

Browser Internals-Same Origin Policy

Browser Internals-Same Origin Policy

Browser Internals-Same Origin Policy

Building Secure User Interfaces With JWTs

Building Secure User Interfaces With JWTs

Building Secure User Interfaces With JWTs

Everyone building a web application that supports user login is concerned with security. How do you securely authenticate users and keep their identity secure? With the huge growth in Single Page Applications (SPAs), JavaScript and mobile applications, how do you keep users safe even though these are 'unsafe' client environments? This presentation will demystify HTTP Authentication and explain how the Next Big Thing - Token Authentication - can be used to secure web applications on the JVM, REST APIs, and 'unsafe' clients while supporting security best practices and even improving your application's performance and scale.

Token Authentication for Java Applications

Token Authentication for Java Applications

Token Authentication for Java Applications

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

Django Web Application Security

Django Web Application Security

Django Web Application Security

n today’s complex market place of corporate partnerships and relationships, sharing information is pertinent to ensuring that business operations are conducted in a secure computing environment with trusted entities being provided access to protected information. In this session, Dan will discuss the basics of authentication and authorization in relation to the SharePoint platform. Further, we will be discussing the technical underpinnings of the SharePoint platform’s processing of a user’s identity dependent on identity provider and authorization settings. As a part of this session we will demonstrate different authentication and authorization configurations that are common place in today’s business settings to include when to use: • Integrated Windows Authentication • Forms Based Authentication using SQL Server • ADFS as a Trusted Identity Provider • Threat Management Gateway with Kerberos (Constrained Delegation using client certs) After attending this session, attendees will have a better grasp of the configuration complexities involved with each scenario as well as the user experience impacts based on the path taken.

2014-04-05 - SPSPhilly - Authentication and Authorization

2014-04-05 - SPSPhilly - Authentication and Authorization

2014-04-05 - SPSPhilly - Authentication and Authorization

ID連携入門 (実習編) - Security Camp 2016

ID連携入門 (実習編) - Security Camp 2016

ID連携入門 (実習編) - Security Camp 2016

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

Companion slides for Stormpath CTO and Co-Founder Les REST API Security Webinar. This presentation covers all the RESTful best practices learned building the Stormpath APIs. This webinar is full of best practices learned building the Stormpath API and supporting authentication for thousands of projects. Topics Include: - HTTP Authentication - Choosing a Security Protocol - Generating & Managing API Keys - Authorization & Scopes - Token Authentication with JSON Web Tokens (JWTs) - Much more... Stormpath is a User Management API that reduces development time with instant-on, scalable user infrastructure. Stormpath's intuitive API and expert support make it easy for developers to authenticate, manage and secure users and roles in any application.

Rest API Security

Rest API Security

Rest API Security

With new tools like Angular.js and Node.js, it is easier than ever to build User Interfaces and Single-Page Applications (SPAs) backed by APIs. But how to do it securely? Web browsers are woefully insecure, and hand-rolled APIs are risky. In this presentation, Robert Damphousse, lead front-end developer at Stormpath, covers web browser security issues, technical best practices and how you can mitigate potential risks. Enjoy! Topics Covered: 1. Security Concerns for Modern Web Apps 2. Cookies, The Right Way 3. Session ID Problems 4. Token Authentication to the rescue! 5. Angular Examples

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Starwest 2008

JWT Authentication with AngularJS

JWT Authentication with AngularJS

JWT Authentication with AngularJS

[Poland] It's only about frontend

[Poland] It's only about frontend

[Poland] It's only about frontend

Even the simplest web application has so many vectors of attack, it's no wonder most people forget at least one. Web applications aren't stand-alone; they are built upon frameworks, upon platforms, upon core libraries, each of which could suffer from vulnerabilities you're not only unaware of, you're statistically unlikely to discover them all. Consider, for example, the recent OpenSSL "Heartbleed" Bug. We hear about security vulnerabilities every week, now it's time to experience them. Find out what the leading concerns are, and the not so common ones too, and experience live demonstrations of how these attacks play out. This presentation aims to arm you with the mindset, tools and resources to minimise the opportunities for attack, and the reduce the fallout when they succeed. From cross-site scripting and session hijacking to brute force and man-in-the-middle attacks, you're expected to cover all your bases so the bad guys can't use a single one.

Web Application Security: Winning When The Odds Are Against You

Web Application Security: Winning When The Odds Are Against You

Web Application Security: Winning When The Odds Are Against You

Roberto Bicchierai - Defending web applications from attacks

Roberto Bicchierai - Defending web applications from attacks

Roberto Bicchierai - Defending web applications from attacks

Pietro Polsinelli

The learning curve for security is severe and unforgiving. Specifications promise infinite flexibility, habitually give old concepts new names, offer endless extensions, and almost seem designed to deliberately confuse. With an eye on architectural impact, actual HTTP messages, and aggressive distaste for fancy terminology, this session delves into OAuth 2.0 as it pertains to REST and shows how it falls into two camps: stateful and stateless. It then explores a competing Amazon-style approach called HTTP Signatures, ideal for B2B APIs. Finally, it discusses a new internet draft launched this year that combines them both into the perfect two-factor system that could provide a one-stop shop for business as well as mobile REST scenarios.

Deconstructing and Evolving REST Security

Deconstructing and Evolving REST Security

Deconstructing and Evolving REST Security

Sharing our agency experience of developing secure web applications for some of the UK's leading high street banks and brands with a focus on the pitfalls you face when developing code in PHP. The talk will contain specific details on the many attack vectors that hackers will use to attempt to access and exploit your site and how you can improve your development process to avoid them. Topics covered will include some old chestnuts like XSS (Cross Site Scripting) and SQL injection through to issues like aSession Hijacking. The talk is aimed at developers who have perhaps not truly considered security of their applications before to developers who would like to extend their knowledge. The talk is aimed at software developers and will contain practical code-based examples and solutions.

Phpnw security-20111009

Phpnw security-20111009

Phpnw security-20111009

Similar a SharePoint Authentication and Authorization (20)

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Writing Secure SharePoint Code - SharePoint Saturday Toronto

Spa Secure Coding Guide

Spa Secure Coding Guide

Spa Secure Coding Guide

Intrigue Core: Scaling Assessment Automation

Intrigue Core: Scaling Assessment Automation

Intrigue Core: Scaling Assessment Automation

Browser Internals-Same Origin Policy

Browser Internals-Same Origin Policy

Browser Internals-Same Origin Policy

Building Secure User Interfaces With JWTs

Building Secure User Interfaces With JWTs

Building Secure User Interfaces With JWTs

Token Authentication for Java Applications

Token Authentication for Java Applications

Token Authentication for Java Applications

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

Django Web Application Security

Django Web Application Security

Django Web Application Security

2014-04-05 - SPSPhilly - Authentication and Authorization

2014-04-05 - SPSPhilly - Authentication and Authorization

2014-04-05 - SPSPhilly - Authentication and Authorization

ID連携入門 (実習編) - Security Camp 2016

ID連携入門 (実習編) - Security Camp 2016

ID連携入門 (実習編) - Security Camp 2016

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

SharePoint 2010, Claims-Based Identity, Facebook, and the Cloud

Rest API Security

Rest API Security

Rest API Security

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Building Secure User Interfaces With JWTs (JSON Web Tokens)

Starwest 2008

JWT Authentication with AngularJS

JWT Authentication with AngularJS

JWT Authentication with AngularJS

[Poland] It's only about frontend

[Poland] It's only about frontend

[Poland] It's only about frontend

Web Application Security: Winning When The Odds Are Against You

Web Application Security: Winning When The Odds Are Against You

Web Application Security: Winning When The Odds Are Against You

Roberto Bicchierai - Defending web applications from attacks

Roberto Bicchierai - Defending web applications from attacks

Roberto Bicchierai - Defending web applications from attacks

Deconstructing and Evolving REST Security

Deconstructing and Evolving REST Security

Deconstructing and Evolving REST Security

Phpnw security-20111009

Phpnw security-20111009

Phpnw security-20111009

Más de Scott Hoag

Standing up your Office 365 tenancy is only the first step on your journey in the Office 365 ecosystem. Understanding your environment and your users behavior will position your administrators to deliver the right insights to management, drive users into the right products at the right time, and monitor the adoption and consumption of your tenancy. In this session, we'll review the reports available in Office 365 across SharePoint, Exchange, Yammer, Groups, and Teams and provide practical use cases and guidance for how you can leverage the reporting available to you to deliver a better service to your end users. You will learn: * The new and updated usage reports around Microsoft Teams, Yammer, and Office 365 Groups * Adoption Content Pack in Power BI enabling you to further visualize and analyze the usage data, create custom reports and share the insights within your organization

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

Securing Office 365 requires knowing more than your way around the Admin Center. With Office 365's heavy dependency on Azure Active Directory for authentication (and in some cases authorization) to Office 365 workloads, it is critical that you understand how users access your environment and how you can control that access. In this session, we'll explore how you can secure your Office 365 tenant with Azure Active Directory, conditional access policies, and more.

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Network Security

Global Azure Bootcamp 2018 - Azure Network Security

Global Azure Bootcamp 2018 - Azure Network Security

To the cloud! This phrase seems to come up more often for organizations look to reduce their SharePoint footprint and operational expenses in their on-premises datacenters. This session will provide a brief overview of a few of the premier Infrastructure as a Service hosting providers for SharePoint, how SharePoint in the cloud stacks up against Office 365 and how to quickly get your SharePoint system built in a repeatable fashion for development environments. You will learn: * Core Infrastructure as a Service (IaaS) providers. * The complexities of what is involved with implementing SharePoint in a cloud hosted environment * Some of the nuances and workarounds for hosting SharePoint in the cloud

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

Looking to reduce the number of post-it notes you see stuck around the office? Seeking to automate your user creation processes for Office 365? Or maybe you're interested in single sign-on for everything you host in the cloud? Are you questioning what a cloud identity is? This session will take you through the basics of identity in the Microsoft Cloud and show you to how to set up and configure Office 365 with Azure Active Directory using the Azure Active Directory Synchronization Connect tools.

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

Office 365 is so much more than just email, instant messaging and file storage. When your data is combined with cloud-driven intelligence and analytics you can discover new, relevant information and people based on who you work with and the content you work on. With personalized insights into how you interact with your data and those around you day-to-day, Office 365 can deliver the right information to you automatically. Join us as we explore the power of the Office Graph and Microsoft Delve for end users. We’ll discuss how the features of Delve can not only surface data for your users, but also act as a gateway to other Office 365 services such as search, Yammer, and Office 365 Video.

JAXSPUG April 2016 - Staying in the Know with Office 365

JAXSPUG April 2016 - Staying in the Know with Office 365

JAXSPUG April 2016 - Staying in the Know with Office 365

Looking to reduce the number of post-it notes you see stuck around the office? Seeking to automate your user creation processes for Office 365? Or maybe you’re interested in single sign-on for everything you host in the cloud? Are you questioning what a cloud identity is? This session will take you through the basics of identity in the Microsoft Cloud and show you how to set up and configure Office 365 with Azure Active Directory using the Azure Active Directory Synchronization Connect tools.

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

To the cloud! This phrase seems to come up more and more often for organizations looking to reduce their SharePoint footprint and operational expenses in their on premise data centers. In this session Scott will give a brief overview of a few of the premier Infrastructure as a Service hosting providers for SharePoint, how SharePoint in the cloud stacks up against Office 365 and how to quickly get your SharePoint system built in a repeatable fashion for development environments.

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

For all of the things that can go wrong with your SharePoint implementation, one of the best things we can do is learn from others. From not accepting that implementing an established information architecture and having an available infrastructure are core tenants of every SharePoint installation to managing SLAs with your end users; join us as we share not only what we've seen as worst practices but also worst experiences. Attendees will learn practices on how to properly manage their SharePoint environments, how to work with other IT department leads and plan for a more properly planned SharePoint environment instead of dealing with the headaches that precipitate themselves when systems are hastily thrown together.

SPSNYC SharePoint Worst Practices

SPSNYC SharePoint Worst Practices

SPSNYC SharePoint Worst Practices

Going to The Cloud(tm) doesn't mean we need to start over. Organisations big and small can leverage Office 365 with their on-premises systems, gaining the agility of a hosted solution that is always up-to-date while adhering to our current policies for compliance and security. If you've ever heard the term "Hybrid SharePoint", but want to understand what it really means and what you can really do with it when it comes to Office 365 and SharePoint Online, this is the session for you. We'll walk through the Hybrid models and the advantages and disadvantages of each. In this session we'll discuss the various aspects of why an organization may wish to stay in a hybrid solution with both on-premises and cloud hosted solutions that are integrated with one another. Further, migration tips and tricks, planning techniques and processes will be discussed.

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

Office 365 brings a host of productivity options, but one of the most overlooked components is how we'll authenticate to The Cloud™. With Microsoft Azure Active Directory driving access and authentication to our Office 365 tenants, it is important to understand how we can interact with it. Join us as we explore Cloud Identity, identity federation, directory synchronisation, and most importantly Azure and its impacts on user experience and access Office 365. Throughout this session, we'll answer the questions that impact you and how your decisions around identity shape your Office 365 experience.

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

Microsoft Office 365 leveraging SharePoint 2013 and integrated capability sets provide for globally distributed workforces with the simple ease of administrative oversight and application development without all the mess of setting up servers, maintaining patches and being concerned with disaster recovery plans. While Office 365 is a great platform to utilize, moving an entire IT infrastructure may not always be the best approach for some organizations. In this session we'll discuss the various aspects of why an organization may wish to stay in a hybrid solution with both on-premises and cloud hosted solutions that are integrated with one another. Further, migration tips and tricks, planning techniques and processes will be discussed.

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

Office 365 brings a host of productivity options, but one of the most overlooked components is how we'll authenticate to the Cloud. With Azure Active Directory (AAD) driving access and authentication to our Office 365 tenants, it is important to understand how we can interact with it. Join us as we explore Cloud Identity, Identity Federation, Directory Synchronization and most importantly Azure and its impacts on user experience and access of Office 365. Throughout this session, we'll answer the questions that impact you and how your decisions around identity shape your Office 365 experiences.

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

To the cloud! This phrase seems to come up more and more often for organizations looking to reduce their SharePoint footprint and operational expenses in their on premise data centers. In this session Dan will give a brief overview of a few of the premier Infrastructure as a Service hosting providers for SharePoint, how SharePoint in the cloud stacks up against Office 365 and how to quickly get your SharePoint system built in a repeatable fashion for development environments. Attendees will have a better understanding of core Infrastructure as a Service (IaaS) providers. Attendees will understand the complexities of what is involved with implementing SharePoint in a cloud hosted environment. Attendees will see SharePoint what some of the nuances and workarounds are for hosting SharePoint in the cloud.

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

To the cloud! This phrase seems to come up more and more often for organizations looking to reduce their SharePoint footprint in their data center. In this session, Scott will give a brief overview of a few of the premier Infrastructure as a Service hosting providers for SharePoint, how SharePoint in the cloud stacks up against Office 365, and how Azure can help us spin up environments in just a few hours! You will learn: * The core cloud concepts of IaaS, SaaS and PaaS * How Azure and AWS EC2 differ and are similar in their product offerings as well as where Azure makes the most sense * How to setup a SharePoint environment through script and web interfaces in Azure

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

Office 365 brings a host of productivity options, but one of the most overlooked components is how we'll authenticate to The Cloud™. With Microsoft Azure Active Directory driving access and authentication to our Office 365 tenants, it is important to understand how we can interact with it. Join us as we explore Cloud Identity, identity federation, directory synchronisation, and most importantly Azure and its impacts on user experience and access Office 365. Throughout this session, we'll answer the questions that impact you and how your decisions around identity shape your Office 365 experience.

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

Organisations of all sizes are begging their technical departments to set up SharePoint 2013 so that they're able to make use of some of the capabilities introduced within the SharePoint 2013 platform. While designing, implementing, configuring and deploying a system in and of itself has its own set of challenges, migrating into that shiny, new SharePoint environment can be even more difficult. In this session, Scott will share his experiences and lessons learned along with tips, tricks and pointers for ensuring that you've considered the various aspects and challenges that arise during a migration effort. Further, as a bonus we'll work though how to not fall prey to some of these pitfalls but rather be able to show that you're a well-rounded professional that's thought things through before pressing the enter key.

SPSCBR - Pitfalls of Migrating to SharePoint 2013

SPSCBR - Pitfalls of Migrating to SharePoint 2013

SPSCBR - Pitfalls of Migrating to SharePoint 2013

Office 365 brings a host of productivity options, but one of the most overlooked components is how we'll authenticate to The Cloud™. With Azure Active Directory (AAD) driving access and authentication to our Office 365 tenants, it is important to understand how we can interact with it. Join us as we explore Cloud Identity, identity federation, directory synchronisation, and most importantly Azure and its impacts on user experience and access Office 365. Throughout this session, we'll answer the questions that impact you and how your decisions around identity shape your Office 365 experience.

Office 365 and Cloud Identity – What Does It Mean For Me?

Office 365 and Cloud Identity – What Does It Mean For Me?

Office 365 and Cloud Identity – What Does It Mean For Me?

Organisations of all sizes are begging their technical departments to setup SharePoint 2013 (and in some cases 2010!) so that they're able to make use of some of the capabilities introduced within the SharePoint platform. While designing, implementing, configuring and deploying a system in and of itself has its own set of challenges, migrating into that shiny, new environment can be even more difficult. In this session, Scott Hoag will share some of his experiences and lessons learned tips, tricks and pointers for ensuring that you've considered the various aspects and challenges that arise during a migration effort. Further, as a bonus we’ll discuss strategies for how to not fall prey to some of these pitfalls, but demonstrate that you're a well-rounded professional that's thought things through before pressing the enter key.

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Más de Scott Hoag (20)

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

SharePoint Conference 2018 - Understanding Office 365 Usage Reporting

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

SharePoint Conference 2018 - Securing Office 365 and SharePoint Online with A...

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Security Center

Global Azure Bootcamp 2018 - Azure Network Security

Global Azure Bootcamp 2018 - Azure Network Security

Global Azure Bootcamp 2018 - Azure Network Security

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

SPIntersection 2016 - TO THE CLOUD! USING IAAS AS A HOSTING PROVIDER FOR SHAR...

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

SPIntersection 2016 - MICROSOFT CLOUD IDENTITIES IN AZURE AND OFFICE 365

JAXSPUG April 2016 - Staying in the Know with Office 365

JAXSPUG April 2016 - Staying in the Know with Office 365

JAXSPUG April 2016 - Staying in the Know with Office 365

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

JAXSPUG January 2016 - Microsoft Cloud Identities in Azure and Office 365

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSDC - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSNYC SharePoint Worst Practices

SPSNYC SharePoint Worst Practices

SPSNYC SharePoint Worst Practices

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

March Sydney Office 365 Meetup - Office 365 and Hybrid Solutions... what work...

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

SYDSP - Office 365 and Cloud Identity - What does it mean for me?

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

SPSVB - Office 365 and Hybrid Solutions... what works for my organization?

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SPSVB - Office 365 and Cloud Identity - What Does It Mean for Me?

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPSVB - To the Cloud! Using IaaS as a Hosting Provider for SharePoint

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

SPS Sydney - To the Cloud! Utilising Azure as a Cloud Hosting Provider for Sh...

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

SPS Sydney - Office 365 and Cloud Identity – What does it mean for me?

SPSCBR - Pitfalls of Migrating to SharePoint 2013

SPSCBR - Pitfalls of Migrating to SharePoint 2013

SPSCBR - Pitfalls of Migrating to SharePoint 2013

Office 365 and Cloud Identity – What Does It Mean For Me?

Office 365 and Cloud Identity – What Does It Mean For Me?

Office 365 and Cloud Identity – What Does It Mean For Me?

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Canberra SPUG - February 2014 - Pitfalls of Migrating to SharePoint 2013

Último

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

How to convert PDF to text with Nanonets

How to convert PDF to text with Nanonets

How to convert PDF to text with Nanonets

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Civil Lines Women Seeking Men

08448380779 Call Girls In Civil Lines Women Seeking Men

08448380779 Call Girls In Civil Lines Women Seeking Men

Delhi Call girls

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

In an era where artificial intelligence (AI) stands at the forefront of business innovation, Information Architecture (IA) is at the core of functionality. See “There’s No AI Without IA” – (from 2016 but even more relevant today) Understanding and leveraging how Information Architecture (IA) supports AI synergies between knowledge engineering and prompt engineering is critical for senior leaders looking to successfully deploy AI for internal and externally facing knowledge processes. This webinar be a high-level overview of the methodologies that can elevate AI-driven knowledge processes supporting both employees and customers. Core Insights Include: Strategic Knowledge Engineering: Delve into how structuring AI's knowledge base is required to prevent hallucinations, enable contextual retrieval of accurate information. This will include discussion of gold standard libraries of use cases support testing various LLMs and structures and configurations of knowledge base. Precision in Prompt Engineering: Learn the art of crafting prompts that direct AI to deliver targeted, relevant responses, thereby optimizing customer experiences and business outcomes. Unified Approach for Enhanced AI Performance: Explore the intersection of knowledge and prompt engineering to develop AI systems that are not only more responsive but also aligned with overarching business strategies. Guiding Principles for Implementation: Equip yourself with best practices, ethical guidelines, and strategic considerations for embedding these technologies into your business ecosystem effectively. This webinar is designed to empower business and technology leaders with the knowledge to harness the full potential of AI, ensuring their organizations not only keep pace with digital transformation but lead the charge. Join us to map a roadmap to fully leverage Information Architecture (IA) and AI chart a course towards a future where AI is a key pillar of strategic innovation and business success.

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

Earley Information Science

The presentation explores the development and application of artificial intelligence (AI) from its inception to its current status in the modern world. The term "artificial intelligence" was first coined by John McCarthy in 1956 to describe efforts to develop computer programs capable of performing tasks that typically require human intelligence. This concept was first introduced at a conference held at Dartmouth College, where programs demonstrated capabilities such as playing chess, proving theorems, and interpreting texts. In the early stages, Alan Turing contributed to the field by defining intelligence as the ability of a being to respond to certain questions intelligently, proposing what is now known as the Turing Test to evaluate the presence of intelligent behavior in machines. As the decades progressed, AI evolved significantly. The 1980s focused on machine learning, teaching computers to learn from data, leading to the development of models that could improve their performance based on their experiences. The 1990s and 2000s saw further advances in algorithms and computational power, which allowed for more sophisticated data analysis techniques, including data mining. By the 2010s, the proliferation of big data and the refinement of deep learning techniques enabled AI to become mainstream. Notable milestones included the success of Google's AlphaGo and advancements in autonomous vehicles by companies like Tesla and Waymo. A major theme of the presentation is the application of generative AI, which has been used for tasks such as natural language text generation, translation, and question answering. Generative AI uses large datasets to train models that can then produce new, coherent pieces of text or other media. The presentation also discusses the ethical implications and the need for regulation in AI, highlighting issues such as privacy, bias, and the potential for misuse. These concerns have prompted calls for comprehensive regulations to ensure the safe and equitable use of AI technologies. Artificial intelligence has also played a significant role in healthcare, particularly highlighted during the COVID-19 pandemic, where it was used in drug discovery, vaccine development, and analyzing the spread of the virus. The capabilities of AI in healthcare are vast, ranging from medical diagnostics to personalized medicine, demonstrating the technology's potential to revolutionize fields beyond just technical or consumer applications. In conclusion, AI continues to be a rapidly evolving field with significant implications for various aspects of society. The development from theoretical concepts to real-world applications illustrates both the potential benefits and the challenges that come with integrating advanced technologies into everyday life. The ongoing discussion about AI ethics and regulation underscores the importance of managing these technologies responsibly to maximize their their benefits while minimizing potential harms.

Artificial Intelligence: Facts and Myths

Artificial Intelligence: Facts and Myths

Artificial Intelligence: Facts and Myths

CNv6 Instructor Chapter 6 Quality of Service

CNv6 Instructor Chapter 6 Quality of Service

CNv6 Instructor Chapter 6 Quality of Service

Scaling API-first – The story of a global engineering organization

Scaling API-first – The story of a global engineering organization

Scaling API-first – The story of a global engineering organization

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

The Raspberry Pi 5 was announced on October 2023. This new version of the popular embedded device comes with a new iteration of Broadcom’s VideoCore GPU platform, and was released with a fully open source driver stack, developed by Igalia. The presentation will discuss some of the major changes required to support this new Video Core iteration, the challenges we faced in the process and the solutions we provided in order to deliver conformant OpenGL ES and Vulkan drivers. The talk will also cover the next steps for the open source Raspberry Pi 5 graphics stack. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://eoss24.sched.com/event/1aBEx

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

🐬 The future of MySQL is Postgres 🐘

🐬 The future of MySQL is Postgres 🐘

🐬 The future of MySQL is Postgres 🐘

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Building Digital Trust in a Digital Economy Veronica Tan, Director - Cyber Security Agency of Singapore Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Último (20)

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

How to convert PDF to text with Nanonets

How to convert PDF to text with Nanonets

How to convert PDF to text with Nanonets

08448380779 Call Girls In Civil Lines Women Seeking Men

08448380779 Call Girls In Civil Lines Women Seeking Men

08448380779 Call Girls In Civil Lines Women Seeking Men

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

Axa Assurance Maroc - Insurer Innovation Award 2024

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

Artificial Intelligence: Facts and Myths

Artificial Intelligence: Facts and Myths

Artificial Intelligence: Facts and Myths

CNv6 Instructor Chapter 6 Quality of Service

CNv6 Instructor Chapter 6 Quality of Service

CNv6 Instructor Chapter 6 Quality of Service

Scaling API-first – The story of a global engineering organization

Scaling API-first – The story of a global engineering organization

Scaling API-first – The story of a global engineering organization

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Handwritten Text Recognition for manuscripts and early printed texts

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

Partners Life - Insurer Innovation Award 2024

🐬 The future of MySQL is Postgres 🐘

🐬 The future of MySQL is Postgres 🐘

🐬 The future of MySQL is Postgres 🐘

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

SharePoint Authentication and Authorization

1.

2. Scott Hoag ciphertxt

3. Dan Usher usher

4. Jason Himmelstein sharepointlhorn

5. introductions

6. a few ground rules…

7.

9. http://xkcd.com/109/

10.

11.

12.

13.

14.

15.

16.

17.

18.

19.

20. authorizing authority authority authority authority

21.

22.

23. http://go.spdan.com/cba

24.

25. http://go.spdan.com/claimsencoding

26. ASP.NET Authentication Source: http://go.spdan.com/iisauth

27. Identity Provider SharePoint 2010 Security Token Service aka RP aka IP-STS 1. Resource Requested 2. AuthN Request / Redirect 3. AuthN Request 4. Security Token 5. Security Token Request 6. Service Token 7. Resource Request w/Service Token 8. Resource Sent

28. Side Story SharePint Anyone?

29.

30.

31.

32.

33.

34. https://sts.domain.com

35.

36. Web Application / Site Collection Anonymous Secured Site / Site Collection / Content Authentication Content Repository Is In Site Group? Content Does user have claim attribute?

37.

39.

40. Questions / Evals

41. jase@sharepointlonghorn.co dan@spdan.com m @usher @sharepointlhorn www.sharepointdan.com www.sharepointlonghorn.com Scott.hoag@spdelta.com liamcleary@msn.com @ciphertxt @helloitsliam http://psconfig.com www.helloitsliam.com