Export (0) Print
Expand All

Plan to deploy Duet Enterprise Online for Microsoft SharePoint and SAP

SharePoint 2013
 

Applies to: Duet Enterprise Online for Microsoft SharePoint and SAP

Topic Last Modified: 2013-12-18

Summary: Guidance about how to deploy Duet Enterprise Online.

NoteNote:
This documentation is preliminary and subject to change.

This article describes the high-level process of deploying Duet Enterprise Online for Microsoft SharePoint and SAP and how you can prepare for deployment. In addition to this article, before you begin deploying Duet Enterprise Online, we recommend that you also read the articles listed at Plan for Duet Enterprise Online for Microsoft SharePoint and SAP. For individual procedures for deploying Duet Enterprise Online, see Install and configure Duet Enterprise Online for Microsoft SharePoint and SAP.

WarningWarning:
To configure a hybrid SharePoint environment, you need a combination of expert skills and significant hands-on experience with SharePoint Server 2013, SharePoint Online, and related products and technologies. We recommend that you engage with an SAP consultant and Microsoft Consulting Services to provide technical guidance and support during the design and deployment of your hybrid environment.
For more information about Microsoft Consulting Services, see Microsoft Services.

In this article:

Deploying Duet Enterprise Online is a collaborative process between several different types of administrators. For information about the types of administrators you will need, see Assembling a deployment team later in this article.

The high-level view of the deployment process looks like this:

  1. SAP administrator deploys Duet Enterprise 2.0 on SAP NetWeaver Gateway 2.0. For information about the steps that are required to configure Duet Enterprise 2.0 in the SAP environment, see Duet Enterprise SAP Deployment Guide on the SAP Support Portal. (Enter your user name and password. In the left-hand pane, click SAP Business Suite Applications, click Duet Enterprise, and then select Duet Enterprise 2.0.)

  2. SharePoint core hybrid configuration is complete. This includes server to server authentication between the Office 365 tenant and the on-premises SharePoint farm, configuring a reverse proxy device, and identity management. For more information, see SharePoint hybrid is configured later in this article.

  3. A subset of Duet Enterprise 2.0 is deployed on the on-premises SharePoint farm. For more information, see Install and configure the on-premises SharePoint farm later in this article.

  4. Duet Enterprise Online is provisioned and configured on the Office 365 tenant. For more information, see Provision and configure Duet Enterprise Online on Office 365 later in this article.

In this phase of the deployment, you install a subset of Duet Enterprise 2.0 on the on-premises SharePoint Server farm. This requires a farm administrator who is also a member of the Administrators group on each server in the SharePoint farm. You will also need to coordinate configuration settings with an SAP administrator because the SharePoint farm and SAP administrators must exchange information and files during the deployment process. For more information, see Information to gather later in this article.

Some of the procedures included in this phase:

  • Verify that the required SharePoint services are started.

  • Grant users access to the site collection.

  • Configure a trust relationship between the on-premises SharePoint farm and SAP system.

  • Install and configure a subset of Duet Enterprise 2.0.

For more information about these procedures, see Install and configure the on-premises SharePoint farm in Duet Enterprise Online for Microsoft SharePoint and SAP.

Duet Enterprise Online must be provisioned on the Office 365 tenant. Detailed steps for doing this are provided in Provision Duet Enterprise Online for Microsoft SharePoint and SAP. Configuration at the tenant level requires a global administrator and includes the following procedures:

  • Create a BCS connection for each of the features provided with Duet Enterprise Online.

  • Configure Duet Enterprise Online security.

  • Specify the account used for workflow tasks.

  • Enable the Duet Enterprise Online solutions at the tenant-level.

  • Grant permissions to external content types.

  • Enable and run RoleSync.

  • Configure Duet Enterprise Online solutions at the site collection and site levels.

For more information about the procedures done during this deployment phase, see Configure Duet Enterprise Online for Microsoft SharePoint and SAP on SharePoint Online.

Before you can begin deploying Duet Enterprise Online, you need to ensure the following prerequisites are in place:

  • Office 365 E3 or E4 tenant that is volume licensed.

  • Duet Enterprise Online licenses for each user who will use Duet Enterprise Online functionality.

  • Duet Enterprise 2.0 licenses for each user who will use Duet Enterprise Online functionality.

  • SharePoint Server 2013 farm deployed in your on-premises environment.

  • SAP system running in your on-premises environment.

  • SharePoint hybrid is configured.

Duet Enterprise Online is supported on O365 E3 and E4 tenancies only. The tenant must also be volume licensed. Duet Enterprise Online is not supported on non-volume licensed tenancies. You must also have a Duet Enterprise Online license for each user who will access the SAP system using Duet Enterprise Online and they must also be assigned a SharePoint Online license. Contact your SAP sales representative for details about licensing Duet Enterprise Online.

After you have purchased the required licenses, you will receive an email with a URL to provision Duet Enterprise Online on your tenant. Detailed steps for doing this are provided in Provision Duet Enterprise Online for Microsoft SharePoint and SAP.

In addition to enabling Duet Enterprise Online on the O365 tenant, you must also deploy a subset of Duet Enterprise 2.0 on an on-premises SharePoint Server 2013 farm. All requests from SharePoint Online users to the SAP system are routed through the on-premises SharePoint farm. For more information about how this works, see Overview of Duet Enterprise Online for SharePoint and SAP. For information about how authentication works in a Duet Enterprise Online architecture, see Plan security for Duet Enterprise Online for Microsoft SharePoint and SAP.

In this section:

  • Basic hardware and software requirements

  • Topology requirements

  • Service application requirements

Duet Enterprise 2.0 requires SharePoint Server 2013 Enterprise Edition. All other hardware and software requirements are the same as for SharePoint Server 2013. For more information, see Hardware and software requirements for SharePoint 2013.

All SharePoint farm topologies and architectures that are supported in SharePoint Server 2013 are supported by Duet Enterprise 2.0. For more information, see Plan logical architectures for SharePoint 2013.

The following SharePoint service applications must be configured and active in SharePoint Server 2013 before you install Duet Enterprise 2.0.

  • Security Token Service Application This service application is used for internal claims security.

  • Secure Store Service Application This service application stores end-user's credentials in a client certificate used to authenticate users on SAP NetWeaver Gateway 2.0.

  • User Profile Service Application This service application is used to map users in SharePoint Online to users in the on-premises SharePoint farm.

Duet Enterprise 2.0 supports the same browsers as SharePoint Server 2013. For more information, see Plan browser support in SharePoint 2013.

NoteNote:
Because SharePoint 2013 runs websites in Internet Information Services (IIS), administrators and users depend on the accessibility features that browsers provide. SharePoint 2013 supports the accessibility features of supported browsers. For more information, see the following resources:
Plan browser support
Accessibility for SharePoint 2013
Accessibility features in SharePoint 2013 Products
Keyboard shortcuts
Touch

All SharePoint hybrid solutions, including Duet Enterprise Online require that a core set of SharePoint hybrid configuration steps have been completed before you deploy a specific SharePoint hybrid solution. This core set of configuration steps includes configuring server to server authentication, identity management, and a reverse proxy. For information about how to complete the core configuration steps, see the following articles:

  • Configure a hybrid topology for SharePoint Server 2013   This article provides guidance for configuration of your on-premises Active Directory environment to support single sign-on (SSO) and directory synchronization, and configuration of your on-premises SharePoint Server 2013 Enterprise farm and SharePoint Online tenant to support hybrid features and functionality.

  • Configure identity management for a hybrid topology in SharePoint Server 2013   This article helps you configure SSO for the on-premises SharePoint farm and Office 365 subscription and configure server-to-server authentication between the on-premises SharePoint farm and SharePoint Online.

Configuring Duet Enterprise Online requires a combination of expert skills and significant hands-on experience with SharePoint Server 2013, Office 365, related products and technologies, and SAP systems. We recommend that you engage an SAP consultant and Microsoft Consulting Services.

For more information about Microsoft Consulting Services, see Microsoft Services.

You will need people with the following expertise to plan for and deploy Duet Enterprise Online.

NoteNote:
This list does not include the administrators you will need if you have not yet completed the core SharePoint hybrid configuration described earlier.
  • SharePoint farm administrator (on-premises SharePoint farm)

  • Global administrator (Office 365)

  • Site collection administrator

  • SAP administrator

Additionally, you will need know which web application was used to configure identity management for the SharePoint hybrid environment. You can get this from the administrator who configured identity management. You will also need to know the Internet-facing URL that was used to configure the SharePoint hybrid environment. You can get this from the reverse proxy administrator. Alternately, if a BCS Hybrid connection has been created for the hybrid environment, a global administrator can get this URL from the properties of the BCS connection in SharePoint Online.

During the deployment process, you must gather information and in some cases share this information with other administrators.

Examples of this process are as follows:

  • Gather information that you will use during deployment.

  • Gather and share information and files with another administrator.

  • Get information and files from another administrator.

To make gathering and sharing information easier, we recommend that you use the deployment worksheet, shown in this section, to record the information that you will gather and use during deployment. In addition to being a convenient way to record and later refer to information that you need during deployment, the worksheet is also a useful way to share information with others on the deployment team.

The following tables provide the contents of the Duet Enterprise Online deployment worksheet. You can use these tables to create a worksheet in the format of your choice or you can download a printable copy of the worksheet in Word document format from the Microsoft Download Center.

WarningWarning:
For security reasons, ensure that you store the worksheet in a secure place such as a secured file share or SharePoint library and only grant permissions to administrators who are involved in the deployment process.

Table 1 - SharePoint on-premises farm

Info needed Description Value Provided by who?

Web application URL

URL of the web application used to configure SharePoint hybrid.

Administrator who configured identity management

App Pool account

App Pool account for the Web application URL.

Farm admin

SSL Certificate

Certificate provided by the SAP administrator and trusted on the SharePoint farm.

SAP admin

Location of Duet Enterprise 2.0 files

SharePoint administrator configuring Duet Enterprise

BDC Service App Name

SharePoint administrator configuring Duet Enterprise

Secure Store Service App Name

SharePoint administrator configuring Duet Enterprise

(Optional) Pass Phrase for Target App

SharePoint administrator configuring Duet Enterprise

Root authority certificate (DuetRoot.pfx) name, path, and password

SharePoint administrator configuring Duet Enterprise

Root authority certificate (DuetRoot) - exported as .cer, name, location, and password

SharePoint administrator configuring Duet Enterprise

Table 2 -Creating BCS connections

Info needed Description Value Provided by who?

Service Address for Workflow

The LsiURL of the OData endpoint that was created on the SAP system for the workflow solution.

SAP Admin

Service Address for Subscription

The LsiURL of the OData endpoint that was created on the SAP system for the Subscription.

SAP Admin

Service Address for Reporting

The LsiURL of the OData endpoint that was created on the SAP system for the Reporting solution.

SAP Admin

Service Address for Role Sync

The LsiURL of the OData endpoint that was created on the SAP system for the RoleSync solution.

SAP Admin

Internet-facing URL

You will need to know this URL when creating the BCS connections for Duet Enterprise.

Reverse Proxy Administrator or BCS Hybrid Administrator

Secure Store Target Application ID

You need to know the name of the Target Application that contains the certificate for authenticating with the reverse proxy.

Reverse Proxy Administrator or BCS Hybrid Administrator

Table 3 - Configure Duet Enterprise Online security

Info needed Value Provided by who?

Identifier

Global administrator

Active Secret

Global administrator

Backup Secret

Global administrator

ContextID of tenant

Global administrator

ACS Metadata Endpoint URL

Global administrator

Workflow tasks account

Global administrator

User account for RoleSync

Global administrator

All users who will use Workflow, Reporting, and RoleSync solutions

Global administrator

Table 4 - Configure Duet Enterprise Online in the SharePoint Online tenant

Info needed Value Provided by who?

Site collection URL in SharePoint Online

Global administrator

Site collection admin

Global administrator

Reporting sub site URL

Global administrator

Workflow sub site URL

Global administrator

Workflow task type names, outcomes and key values

SAP administrator

The Install and configure Duet Enterprise Online for Microsoft SharePoint and SAP article, also referred to as the Duet Enterprise Online deployment guide, prompts you to create and collect the information and files that you will need during deployment. If you want to get a head start before you actually start deploying, you can collect the following information and list it in the Duet Enterprise Online deployment worksheet:

  • Get the web application URL of the web application used to configure SharePoint hybrid. You can get this URL from the administrator who configured identity management. Once you have this URL, you can get the APP Pool account from a farm administrator of the on-premises SharePoint Server 2013 farm. List this information in the Web application URL and App Pool account rows of Table 1 of the deployment worksheet.

  • Get the SSL certificate from the SAP administrator and list it in the SSL Certificate row of Table 1 of the deployment worksheet.

  • Collect all the information listed in Table 2 of the deployment worksheet.

  • Get the user accounts of all users who will be assigned a Duet Enterprise Online license and list them in the All users who will use Workflow, Reporting, and RoleSync solutions row of Table 3 of the deployment worksheet.

  • Get the Workflow task type names, outcomes, and key values from the SAP administrator and list them in the Workflow task type names, outcomes and key values row of Table 4 of the deployment worksheet.

You can use the tables listed in the previous section to create a worksheet in the format of your choice or you can download a printable copy of the worksheet in Word document format from the Microsoft Download Center.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft