We would like to setup a one hour to discuss the following
Hija has hundreds of subject specific groups where Hija staff and Members can securely share documents. Currently, Hija uses SharePoint 2013 on-premise to meet these requirements. Separately, Hija uses SharePoint Online for it's Intranet.
Hija plans to migrate all its websites, including workspaces, to a Sitefinity on-premise webserver. (Work to be completed by Aug 1, 2020)
The problem is that Sitefinity's document library does not meet our requirements. Its front-end UI is poor (e.g., no bulk copy/move/delete) and its back-end storage lacks important features such as folder level permissions.
Hija needs help determining if SharePoint Online can be successfully integrated with Sitefinity.
Requirements
Security: Hija staff and Members need single sign on to access Sitefinity and SharePoint Online content. Staff need to secure SharePoint resources using user and groups as security principles.
Single Sign On: Hija plans to use Sitefinity IdentityServer3 for single sign on, with on-premise SQL database storing all security principles. SharePoint Online must integrate with SSO provider so that users will only need to sign-in once when accessing Sitefinity, Discourse, Higher Logic, and SharePoint Online. If needed, Hija is willing to replace Sitefinity IdentityServer3 with 3rd party Identity Service provider such as Okta. User Statistics:
6,000 active users who will need access to SharePoint Online
80 Hija staff
210,000 total users. Most users do not need access SharePoint Online (They login to download free standards)
Securing Resources: Hija staff need to secure SharePoint Online site and document library using security principals from the Identity Service provider. In other words, external users and groups will appear in People Picker. (Hija cannot rely on Azure AD trust partnerships since not all members have Office 365)
Integration:
User & Group Sync: Hija has a proprietary on-premise CRM (asp.net website) that maintains the list of users for each group. Hija needs to programmatically sync the SharePoint Online security principles with this CRM.
Recent Changes: Hija needs to roll-up all the recent changes to documents, calendar, and tasks from all the SharePoint Online groups a user is member of. This will be used as the user's personal dashboard to review all recent group activities. (Prefer to host this roll-up on Sitefinity, so that we can include non-SharePoint data as well)
Design: SharePoint online sites should share the new Hija website design.
Use Hija logo and masthead
Use Hija navigation (including hamburger menu that asynchronously fetches navigation data from Sitefinity website)
Use Hija footer
User Hija CSS if possible.
Example Workflow
User goes to the Groups homepage
User is prompted to login (redirect to Single Sign On server)
User authenticates and redirected back to Groups homepage, where they see:
Roll-up of the most recent documents/events/tasks from all SharePoint sites they are a member of
List of all the SharePoint sites they are a member of
User clicks on 01MG link which takes them the 01MG SharePoint site. If user moves from Sitefinity to SharePoint, the transition is seamless, with no login prompt, and the SharePoint site looks like the Sitefinity site. (Only major difference is the URL domain name)
Additional Topics
Is this future proof? Don't want Microsoft to deprecate using SharePoint Online as Extranet, like they did for public facing websites.
Can you provide examples of other companies doing this successfully? Would prefer online example we can demo.
Will Azure Active Directory B2B meet our requirements (using guest accounts), or will we have to use another Identify Service provider?
Will Hija Members need to create a Microsoft account in order to access SharePoint Online as a guest?
What are the license requirements (if any) for adding thousands of guest accounts to our Azure AD?
Is it possible to use a custom domain for SharePoint Online?
Notes
Sites can't be shared with people unless they have a Microsoft account or a work or school account in Azure AD.
How does this affect Hija?
When sharing a SharePoint Online site, guests will receive an email invite. Can this be avoided? Not all users will need to access site, but we still want to give them access. For example, use graph API to bulk add 5,000 guest users, but no invites.
Once user attempts to login for first time, they can receive an invite from MS to complete their account setup.
Create audit report on external users using the Office 365 Compliance Center.
About the recuiterMember since May 20, 2018 Chatinder Banga
from Berkshire, United Kingdom