SharePoint Security, fromServer Hardening to ADFS
Some situations require advanced security configurations for password management, single sign-on, two-way Active Directory sync, user management policies, and federated security frameworks. Having properly managed security is the only way to keep content trimmed to those who should have access, and to ensure users are not experiencing unproductive time due to inability to access a misappropriated area.
We Can Help With:
SharePoint publishing typically uses a reverse proxy to act as a secure endpoint for SharePoint. The primary purpose of this device or software-based application is to carry out pre-authentication of connections to authenticate users
first, and then only allowing authenticated users to access SharePoint. It essentially stops anonymous users gaining access to the servers hosting SharePoint without first being authenticated.
Simple Account Manager makes management of security accounts easier!
Microsoft has established best practices that can lock a farm down to whatever extent is desired. We have expertise in this and have met high standards through clients penetration testing.
How We Can Help:
Is SharePoint secure? We hear that question a lot. It needs hardening for public website usage. It can be hardened sufficiently to have multiple web apps on the same farm used for intranet, extranet, and public site. A methodical approach can lock it down and withstand any penetration test. The weak point is within the sloppy administration. Following best practices can solve nearly all of that.
Surface area reduction is a security measure that involves stopping or disabling unused components. Surface area reduction helps improve security by providing fewer avenues for potential attacks on a system.
Securing SQL Server can be viewed as a series of steps, involving four areas: the platform, authentication, objects (including data), and applications that access the system.
You need ADFS when you want your staff to authenticate to your domain's active directory and then be able to log into an external SharePoint portal seamlessly. Microsoft's Active Directory Federation Service (ADFS) provides secure, federated identity management for SharePoint hosted at remote locations and uses your internal active directory for all your users for single sign-on (SSO).
Web single sign-on (SSO)AD FS provides Web SSO to federated partners outside your organization, which enables their users to have an SSO experience when they access your organization’s Web-based applications.
InteroperabilityAD FS provides a federated identity management solution that interoperates with other security products that support the WS-* Web Services Architecture. AD FS follows the WS-Federation specification (for passive clients; that is, browsers), which makes it possible for environments that do not use the Windows identity model to federate with Windows environments.
Partner user account management not requiredThe federated partner's Identity Provider (IP) sends claims that reflect its users' identity, groups, and attribute data. Therefore, your organization no longer needs to revoke, change, or reset the credentials for the partner's users, since the credentials are managed by the partner organization. Additionally, if a partnership needs to be terminated, it can be performed with a single trust policy change. Without AD FS, individual accounts for each partner user would need to be deactivated.
Claim mappingClaims are defined in terms that each partner understands and appropriately mapped in the AD FS trust policy for exchange between federation partners.
Centralized federated partner managementAll federated partner management is performed using the AD FS Microsoft Management Console (MMC) snap-in.
Extensible architectureAD FS provides an extensible architecture for claim augmentation, for example, adding or modifying claims using custom business logic during claims processing. Organizations can use this extensibility to modify ADFS to finally support their business policies.
Companies utilize forms-based authentication (FBA) with Internet-facing portals so that partners, clients, or board members don't require an active directory account. User identities are stored in a Microsoft SQL Server database.
If you want to share information between users who are within the corporate domain and external users, we can extend your SharePoint Web application to create an extranet-facing access point.
Let us will build your SharePointServer, or server farm, and keep it up-to-date with our proactive maintenance and unlimited support. Take advantage of the expertise of a leading Gold Partner specialized in SharePoint.
Getting introduced through a brief demo of our work quickly shows our solutions and begins discussion of your SharePoint goals and how we can assist.