SharePoint 2013 external sharing

%3CLINGO-SUB%20id%3D%22lingo-sub-38634%22%20slang%3D%22en-US%22%3ESharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38634%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20requirement%20wherein%20we%20would%20want%20to%20share%20a%20SharePoint%202013%20on-premise%20site%20collection%20to%20external%20users%20(i.e.%20outside%20the%20organization).%3C%2FP%3E%3CP%3EWhat%20are%20the%20different%20options%20available%20currently%20for%20external%20sharing%20of%20SP2013%20sites%3F%3C%2FP%3E%3CP%3EThe%20SP2013%20site%20will%20have%20some%20webparts%20that%20will%20connecting%20to%20other%20on-premise%20systems%2C%20would%20this%20be%20automatically%20handled%20in%20any%20of%20the%20options%20for%20external%20sharing%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38734%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38734%22%20slang%3D%22en-US%22%3ECan%20you%20please%20share%20if%20you%20are%20referring%20to%20any%20specific%20blogs%20from%20Wictor%20Willen%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38681%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38681%22%20slang%3D%22en-US%22%3ETake%20a%20look%20at%20Witor%20Willen%20posts%20around%20this%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38663%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38663%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20correct.%20For%20example%20the%20following%20blog%20explains%26nbsp%3BHOW%20TO%20SET%20UP%20MICROSOFT%20LIVE%20ID%20AS%20AN%20AUTHENTICATION%20PROVIDER%20FOR%20SHAREPOINT%202013%20ON%20PREMISE%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fblog.crgroup.com%2Fhow-to-set-up-microsoft-live-id-as-an-authentication-provider-for-sharepoint-2013-on-premise%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fblog.crgroup.com%2Fhow-to-set-up-microsoft-live-id-as-an-authentication-provider-for-sharepoint-2013-on-premise%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20it%20uses%20Azure%20ACS%2C%20which%20I%20believe%20is%20not%20supported%20now.%20So%20am%20looking%20for%20a%20more%20recent%20recent%20and%20best%20approach%20to%20the%20same...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38656%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38656%22%20slang%3D%22en-US%22%3EFBA%20is%20just%20an%20example...if%20you%20do%20a%20deep%20search%20over%20the%20Internet%2C%20you%20can%20find%20some%20great%20resources%20about%20configuring%20authentication%20using%20Windows%20Live%20ID%2C%20Open%20ID%20or%20other%20providers%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38655%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38655%22%20slang%3D%22en-US%22%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3EHowever%2C%20we%20don't%20want%20to%20provide%20an%20additional%20authentication%20option%20for%20our%20users%20in%20on-premise%2C%20but%20instead%20expose%20the%20site%20collection%20to%20be%20shared%20and%20accessed%20by%20our%20partners.%3C%2FP%3E%3CP%3EBelieve%2C%20implementing%20FBA%20alone%20will%20not%20provide%20any%20provisions%20to%20enable%20sharing%20outside%20organization%20network.%20Moreover%20this%20requires%20creating%20and%20storing%20user%20information%20in%20our%20own%20repositories%20(SQL%20server%20in%20thes%20case)%20while%20there%20are%20already%20some%20identity%20providers%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20thinking%2C%20if%20there%20is%20mecahism%20to%20expose%2Fshare%20the%20on-premise%20SharePoint%202013%20site%20to%20external%20partners%20via%20Azure%20AD%20or%20other%20identity%20providers%20(Okta%2C%20Ping%20Federated%20etc.)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-38644%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%202013%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-38644%22%20slang%3D%22en-US%22%3EYou%20can%20configure%20SharePoint%20to%20use%20different%20authentication%20methods%20so%20users%20living%20in%20different%20credentials%20stores%20can%20log%20into%20SharePoint....a%20good%20start%20for%20you%20is%20just%20to%20read%20how%20to%20configure%20forms%20based%20authentication%20for%20SharePoint%202013%3A%20%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fptsblog%2F2013%2F09%2F20%2Fconfiguring-sharepoint-2013-forms-based-authentication-with-sqlmembershipprovider%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fptsblog%2F2013%2F09%2F20%2Fconfiguring-sharepoint-2013-forms-based-authentication-with-sqlmembershipprovider%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

We have a requirement wherein we would want to share a SharePoint 2013 on-premise site collection to external users (i.e. outside the organization).

What are the different options available currently for external sharing of SP2013 sites?

The SP2013 site will have some webparts that will connecting to other on-premise systems, would this be automatically handled in any of the options for external sharing?

 

Thanks!

6 Replies
Highlighted
You can configure SharePoint to use different authentication methods so users living in different credentials stores can log into SharePoint....a good start for you is just to read how to configure forms based authentication for SharePoint 2013: https://blogs.technet.microsoft.com/ptsblog/2013/09/20/configuring-sharepoint-2013-forms-based-authe...
Highlighted

Thanks!

However, we don't want to provide an additional authentication option for our users in on-premise, but instead expose the site collection to be shared and accessed by our partners.

Believe, implementing FBA alone will not provide any provisions to enable sharing outside organization network. Moreover this requires creating and storing user information in our own repositories (SQL server in thes case) while there are already some identity providers available.

 

I am thinking, if there is mecahism to expose/share the on-premise SharePoint 2013 site to external partners via Azure AD or other identity providers (Okta, Ping Federated etc.)

Highlighted
FBA is just an example...if you do a deep search over the Internet, you can find some great resources about configuring authentication using Windows Live ID, Open ID or other providers
Highlighted

Yes correct. For example the following blog explains HOW TO SET UP MICROSOFT LIVE ID AS AN AUTHENTICATION PROVIDER FOR SHAREPOINT 2013 ON PREMISE

 

http://blog.crgroup.com/how-to-set-up-microsoft-live-id-as-an-authentication-provider-for-sharepoint...

 

However, it uses Azure ACS, which I believe is not supported now. So am looking for a more recent recent and best approach to the same...

Highlighted
Take a look at Witor Willen posts around this
Highlighted
Can you please share if you are referring to any specific blogs from Wictor Willen