Extending SharePoint 2013 Webapplication to partner users

I want to extend my SharePoint 2013 Web Application to the partner external users and want to use Form based security. For the internal users it is AD claim based security.
I found two options to extend my web application
1. Use default zone it self and configure two Authentication methods
2. Use two zones one for internal and one for external users.
Can you provide guidance on which one to choose in my case.
Thanks in advance
Kiran

Hi Kiran,
According to your description, my understanding is that you extend your SharePoint 2013 Web Application to the partner external users with Form based security.
Yes, the two options all are available for you. For your requirement, I suggest you use the option 2.
There are some articles for your reference:
http://technet.microsoft.com/en-us/library/gg276325(v=office.15).aspx
http://msdn.microsoft.com/en-us/library/ff648385.aspx
http://blogs.technet.com/b/ptsblog/archive/2013/09/20/configuring-sharepoint-2013-forms-based-authentication-with-sqlmembershipprovider.aspx
I hope this helps.
Thanks,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Similar Messages

Accessing Sharepoint 2013 externally for domain users and customers

Just an FYI I am not a SP administrator by any means but have be tasked with taking over this project and could use some assistance.
Sharepoint 2013 is working fine internally. Users access the site and login with their domain credentials. Our client is moving one of their departments to another building down the street and we'd like them to be able to access local resources without the
use of another server or site to site vpn or standard vpn.
My question is, how do we make Sharepoint accessible outside of their local network?
If we open up a port on the router and have it forward all request to Sharepoint server will we be able to access it?
Also, how will they authenticating with the Sharepoint Server? Do they use the same user credentials?
I forgot to mention this is Sharepoint 2013 Enterprise Edition. We are also using Project Server 2013 as well.
Thanks in Advance

Hi 3s1k,
According to your description, my understanding is that you want to access the SharePoint site from Internet.
You need to first ensure that you enable Anonymous Access for your web application. You'll then need to set up DNS for the domain you own to point to your web front end server (or virtual IP if it's load balanced). Then set up the appropraite IIS bindings
for the web application, and finally you'll need to extend your web application to an Internet Zone and give it the appropriate domain name.
There are some similar posts for your reference:
https://social.technet.microsoft.com/Forums/en-US/2277d710-ed05-4613-bd66-fd12e4d64b61/sharepoint-intranet-site?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/fd968a08-393b-41c0-a916-c48ce0f83104/configure-sharepoint-2013-for-accessing-over-internet?forum=sharepointadmin
http://sharepoint.stackexchange.com/questions/54315/sharepoint-2013-extranet-acces-outside-the-internal-network
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Sharepoint 2013 - Active Directory Import User Profile Property manager fields

Hi there,
I juste encountered actually a little issue regarding the Active Directory Import User Profil.
Importation seems to work well but I have a little problem regarding the Manager field.
When I verify a user profil through the sharepoint admin page ("Manage user profil") , I can see the manager field is correctly populated, but if I want to check my profil as a user (personal information), the manager field is not visible.
With Sharepoint Admin and Manage Profil Properties, I haven't the possibility to modify some settings for the manager.
For example, Policy parameters is greyed.
The only way I found to show this field in a user profil is to give the permission "allow users to Edit values ...".... setting I don't want to set.
Have you already this sort of issue ?
Thanks for your help/idea.

Hi Michael,
I don't remember well what I did exactly regarding this issue because I played a lot with user profil.
I know I used this powershell script from Sheyia which in fact help me a lot to clean and create a good profil setting.
http://blogs.technet.com/b/sheyia/archive/2013/10/09/sharepoint-2013-another-way-to-change-order-for-user-profile-properties-via-powershell.aspx
For example, this script help me to resolve some double entries.
Let-me know if it help you (or not of course)

SharePoint 2013 CAL and External users

Hi,
We are setting up an extranet site(SharePoint 2013 standard version) on Rackspace, Both employee and non-employee will use this site. Employee will use company existing SAML 2.0 based authentication and non-employee will use FBA to login to
the portal.
I would like to know if we need to buy CAL for external users(non-employee)? What is the definition of external users?
Thanks,
Pat

Check out this post and this should answer all you questions.
http://social.technet.microsoft.com/forums/sharepoint/en-US/0756aaa7-b307-4793-b019-bc58d4ace8b2/sharepoint-foundation-fba-on-internet-licensing
Thanks, Danny Hickman IT Support Specialist

Sharepoint 2013 - domain configuration, external users, creating subsite in site collection, moving subsites

Hello all, first of all thank you for reading this post. Please bare with me, I am new with this environnement. I have had several problems in past week trying to configure a local sharepoint server 2013, most of it went well but now I am stuck and I badly
need help! I intend to make sharepoint available through the Ethernet connection in my office.
Here is my config:
Sharepoint 2013 (local)
Microsoft SQL 2012
Microsoft Server 2012
I am able to access the sub-site I created in the Sharepoint Central Administration Web Application.
My first problem is, I created another Web Application with the following URL config http://intranet.[domain].com but I am not able to access it through my browser. It seems to point to bad IP I probably configured accidentally a CNAME on my hosting Cpanel
with the IP 192.168.1.199. So, When I ping the URL I do not get any connection. Just that it couldn't connect to 192.168.1.199. Now I added a CNAME on my CPANEL for the URL http://intranet.[domain].com --> 127.0.0.1. Is this the correct way to do it?
More information: The DNS manager has been configured following this tutorial:
Create SharePoint 2013 Web Application
http://www.youtube.com/watch?v=yW7LT99eUMs
I am not too sure of the proper configuration for the IIS Manager.
Anomymous Authentication is enabled
Windows Authentication is enabled
Everything else is disabled.
My second problem is that I cannot invite any user to the site. Even the one that have the email corresponding to our domain. Will I be able to invite parent domain users if the Web Apllication is properly configured with the CNAME on the Cpanel?
I tried to activate the External user invitation feature from Site Collection Features but it's not in the list. I am logged in as an administrator but next to the wrench it says "System Account" (with an arrow pointing down) so I guess this is
the "logged in user as..."? Am I missing something here?
Any advices would be greatly welcomed. I've run out of ideas.
Much appreciated,
Herb

Hello Ramu, thank you for your fast reply.
Quote Ramu: "You have to create A record called intranet.your-domain.com points to your SharePoint Server
IP and also loop back ip address in the host file entry on the SharePoint server(127.0.0.1 intranet.SharePoint.com)"
Is this a record on our corporate website Cpanel? What should I put in the "Address" field of
the Record (we do not have static IP)?
For the loop back, is this on the DNS Manager of our local Sharepoint 2013 server?
Quote Ramu: "3.
if you want to publish this externally, then your site needs to publish in your Network and it should points to your public static IP in your public domain control panel(Cpanel)."
In the first scenario where I only want intranet access, should everything be OK with the above mentionedconfiguration a DNS Record:
Which address should it be for the record?
Should I assign a fix IP to our server like 192.168.1.55?
What if another desktop computer gets an IP conflict with the server
fix IP, or what if we have to shut down the server everyday will the server IP change ?
General question: From what I understand, it is possible to put a DNS Record on the public Cpanel from our corporate website with a local IP that will only be resolved
if accessed through the local network? Ex.: Name: intranet.[our-corporate-public-domain].com, Address: 192.168.1.55 ?
Much appreciated RAMU.
Regards,
Herb

Sharepoint 2013 config, DNS, Intranet Users... Please Help!

Hello all, first of all thank you for reading this post. Please bare with me, I am new with this environnement. I have had several problems in past week trying to configure a local sharepoint server 2013, most of it went well but now I am stuck and I badly
need help! I intend to make sharepoint available through the Ethernet connection in my office.
Here is my config:
Sharepoint 2013 (local)
Microsoft SQL 2012
Microsoft Server 2012
I am able to access the sub-site I created in the Sharepoint Central Administration Web Application.
My first problem is, I created another Web Application with the following URL config http://intranet.[domain].com but I am not able to access it through my browser. It seems to point to bad IP I probably configured accidentally a CNAME on my hosting Cpanel
with the IP 192.168.1.199. So, When I ping the URL I do not get any connection. Just that it couldn't connect to 192.168.1.199. Now I added a CNAME on my CPANEL for the URL http://intranet.[domain].com --> 127.0.0.1. Is this the correct way to do it?
But then, this will only allow to connect to the server in local. I want all the LAN users at my office to be able to connect to this intranet.
More information: The DNS manager has been configured following this tutorial:
Create SharePoint 2013 Web Application
http://www.youtube.com/watch?v=yW7LT99eUMs
I am not too sure of the proper configuration for the IIS Manager.
Anomymous Authentication is enabled
Windows Authentication is enabled
Everything else is disabled.
My second problem is that I cannot invite any user to the site. Even the one that have the email corresponding to our domain. Will I be able to invite parent domain users if the Web Apllication is properly configured with the CNAME on the Cpanel?
I tried to activate the External user invitation feature from Site Collection Features but it's not in the list. I am logged in as an administrator but next to the wrench it says "System Account" (with an arrow pointing down) so I guess this is the
"logged in user as..."? Am I missing something here?
Any advices would be greatly welcomed. I've run out of ideas.
Much appreciated,
Herb

Thank you so much for your reply Amr, this helps a lot.
Thank you for the link, I have a few questions with regards to adding users.
Quote Amr.: For the dns record it depends on whether you are willing to expose your intranet to external
users If your interanet will be used internally just add a record inyour internal DNS server to bind the address intranet.domain.com
For now, we plan only to make the SP for internal purposes.
Question: So as I understand it, even if my corporate hosting website domain is not linked through a CNAME to my local SP server, it shouldn't be a problem to invite local users with the email they have hosted
with the same domain as the intranet domain I plan to use right (Ex.: intranet.mydomain.com / myusers.mydomain.com)?
Am I gonna have problem adding users with an email under the same domain?
I tried to allow external users invite last week but I couldn't find the Activate External User function in the list for that purpose. I was logged in as a system admin and was looking that thing for hours.
My only hope inviting user with the same domain as the intranet url will be to configure my SP using your recommendation with the link given (Configure alternate access mappings for SharePoint 2013).
Much appreciated,
Herb

SharePoint 2013 permissions for each user

I am working on my own SharePoint 2013 test site and I need to grant permission to the test accounts. I want to make certain the 3 test accounts can not see the lists, files, and workflows that the other users created.
Do I need to grant permission at the site level, user level, custom list level, for each workflow, and/or for each custom form? Do I invite each user and/or 'share' with each user? Can you tell me and/or point me to a source that will tell me what level
of permission I need and how to grant this type of permission?

Wendy,
In sharepoint, you can grant permission at any level you want. That permission will carry forward by default until someone break them and configure unique permission.
In ideal case, we recommend to use share security group to grant permission and not grant to individual user. Also try to restrict 2 default site group (Owner/member/viewer) as much possible, but in reality ppl break these rule often and eventually end up
with maintenance overhead.
I will recommenced you and everyone to go through this nice ppt which clears sharepoint permission idea in our mind.
Here you go - SharePoint
Permissions Worst Practices
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

Sharepoint 2013 ADFS Integration duplicates User Profiles for each Authentication Type

Hello everyone
i am building up a sharepoint farm which is hosting some of our corporate web sites. before integration Adfs and using SAML-Based Authentication every user had a single User Profile and were happy.
when i integrated adfs 3.0 and sharepoint 2013 SP1 i found whoun a user logs into sharepoint by using trusted identity token issuer (adfs 3.0) they get redirected to a new profile which is totally different from their old Profile. what is the problem ?

The problem is that SharePoint does not support Multilogon accounts. I asked for that here -
http://sharepoint.uservoice.com/forums/282887-customer-feedback-for-sharepoint-server/suggestions/7085002-multilogon-accounts
If you're just moving to ADFS only, then you can migrate users with Convert-SPWebApplication -
https://technet.microsoft.com/en-us/library/jj219696(v=office.15).aspx or with a script provided here:
http://blogs.msdn.com/b/sambetts/archive/2014/09/03/how-to-migrate-sharepoint-users-to-adfs.aspx (uses Move-SPUser).

SharePoint 2013 workflow 'If current user is a member of a group'

I would like my workflow to check if the user who created the current item is a member of a group, preferably an Active Directory group but if not a SharePoint group.
How can I do this please?
Thanks
Julie
J Sykes

Hi,
You need to install the CodePlex solution(UsefulSPDWorkflowActivities_0.5.0.zip) from the following URL to the get custom activities in the SharePoint Designer.
http://spdactivities.codeplex.com/
Once you download, you will have setup instructions file, follow these instructions to install the solution (Installguide.txt).
I would suggest you to use the SharePoint 2013 style workflow, as we need to implement latest one, may be 2010 style workflows will be removed with the latest version of SharePoint later. And also other thing, you will not have to depend on the other
solutions such as CodePlex
Use the "Call Http Web Service" action and use the REST API to check whether the user is in within group.
http://sharepoint/_api/SP.AppContextSite(@target)/web
/getbyname('Approvers')/Users?$filter=Id eq " + CurrentItem.CreatedBy.ID + "
?@target='http://sharepoint'
http://msdn.microsoft.com/en-us/library/office/dn531432(v=office.15).aspx
http://blog.vgrem.com/2014/05/08/consuming-the-sharepoint-2013-rest-service-from-sharepoint-designer/
Please don't forget to mark it answered, if your problem resolved or helpful.

After doing a full profile sync in sharepoint 2013 , some of the users photo/picture disappeared

I have noticed that those users who uploaded their picture ,these are the users who have lost their photo
harsh damania

You have 20 separate forests you're synchronizing with?
You do need to run Update-SPProfilePhotostore. Consider it part of the synchronization process and schedule it appropriately via Task Scheduler.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Integrate Outlook Calendar for all users to Sharepoint 2013 calendar

Hi,
I have a specific requirement to add the outlook calendar for each user in my organisation to sharepoint 2013 calendar.
Any user at any point of time can get the details for other user(s) from the Sharepoint 2013 calendar.
I know there is a calendar overlay option in sharepoint which will add my outlook calendar to Sharepoint 2013.
Can any one please help me to integrate all users calendar so that the schedule for any user(s) can be requested directly from Sharepoint 2013 calendar.
I am ok to use exchange webservice and c# to achieve this.
Thanks in advance.

Hi Somdeep,
I assume you are using Exchange product as SMTP server.
If you would like to integrate all Exchange mailbox accounts' schedule to SharePoint calendar, I'd recommend you create a shared mailbox in Exchange side, then let all accounts make schedule on it. That way, you may need to overlay one Exchange
calendar on SharePoint calendar.
Regards,
Rebecca Tu
TechNet Community Support

Excel web app Review tab with SharePoint 2013

Is there a way to get the review tab to show up in Excel web app with SharePoint 2013 on-prem? Users want to be able to use the "add comments" feature while in the excel web app.

Hi,
That functionality isn't available in Excel Web App on-premise. I just applied the Oct 2014 CU to WAC and do not have it, so the feature just hasn't made it down yet.
You can use the "add comments" tab in excel client.
Here is a similar post, you can take a look at:
https://social.technet.microsoft.com/Forums/office/en-US/b0f3ab85-8f46-484b-8fdb-407f57846b61/office-wep-app-review-tab-is-not-disponible?forum=sharepointgeneral
Best Regards,
Lisa Chen
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

SharePoint 2013 - Unable to open Office documents in Internet Explorer - cannot access file

In SharePoint 2013 some of our users receive an error message when trying to open an Office application from Internet Explorer 11. Other users on the same browser don't have this issue.
Any ideas on how to resolve?

HI Greg,IE11 is having some issues with the SharePoint 2013.
http://expertsharepoint.blogspot.de/2014/08/issues-with-sharepoint-2013-and.html
Since
SharePoint 2013 fully support IE 32-bit version above 7, there might be compatibility issue with other browsers. I’d recommend you use IE 8,9,10 32-bit for optimal
Performance.
3.
Make sure the IE (Internet Explorer) Version should be 32-bit and not
a 64-bit
- See more at: http://expertsharepoint.blogspot.de/search/label/Known%20Issues?updated-max=2014-08-19T17:33:00%2B08:00&max-results=20&start=4&by-date=false#sthash.a2N14nDL.dpuf
Anil Avula[MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

Third party tool for document preview in sharepoint 2013

Hello,
we are looking for third party tool which provide preview of any documents in documnet library in sharepoint 2013. So when users just hover over the document, they can see the preview. Do
any of you please provide a good suggetion in case if you have used in the past? In my research I came across
Knowledgelake and harepoint. Also I think there is one Metalogix but I know for sure it a way too costly. So please help if you know who does this job with a fair amount of price.
Thanks.

I've found Ontolica Preview to be adequate for this. Reasonable product and supports a lot of formats
http://www.sharepointreviews.com/component/content/article/69-sharepoint-auditing/202-Ontolica-BehaviorTracking-for-SPS-2003-.pdf
Might also be worth spending some time on SharePointreviews.com for other suggestions
http://www.sharepointreviews.com/
Steven Andrews
SharePoint Business Analyst: LiveNation Entertainment
Blog: baron72.wordpress.com
Twitter: Follow @backpackerd00d
My Wiki Articles:
CodePlex Corner Series
Please remember to mark your question as "answered" if this solves (or helps) your problem.

Deploying SSRS Reports to SharePoint 2013 Result in Error

We are trying to deploy SSRS reports developed in VS 2012 to SharePoint 2013. Whenever any user deploys the report, they receive the following error.
Error 1
Report Server has encountered a SharePoint error. --->
Microsoft.ReportingServices.Diagnostics.Utilities.SharePointException: Report Server has encountered a SharePoint error. --->
Microsoft.SharePoint.SPException: The list item could not be added or updated because duplicate values were found in one or more fields in the list. --->
System.Runtime.InteropServices.COMException: The list item could not be added or updated because duplicate values were found in one or more fields in the list.
Has anyone received this error and know of a solution?
Thanks in advance for your assistance.

Hi jbud55,
According to your description, my understanding is that there is an error when you deployed SSRS via to SharePoint 2013.
This error displays that there is a column that does not allow duplicate value in the list. So, please check the list columns.
In addition, as this issue related to SSRS, you can also create a new thread on SQL Reporting Serivces forum, more experts will assist you with SSRS.
SSRS forum:
http://social.technet.microsoft.com/Forums/en-US/home?forum=sqlreportingservices
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Extending SharePoint 2013 Webapplication to partner users

Similar Messages

Maybe you are looking for