We're looking at implementing a SharePoint solution (WSS 3.0/MOSS 2007) to allow our ‘mobile warriors’ to access the documents they need, and also to add some workflow tools, such as the expenses & timesheets templates.
We’re currently deciding weather to buy a new server, and host the solution internally, published via ISA, or to ‘rent’ a hosted server, or to do a bit of both, buy a server, and rent rack space for it with a co-lo provider. The reasons we’re looking at an offsite provider is because of the connection speeds – we only have a 2mb up/2mb down leased line, were as some of these hosted providers have GB connections.
However, before I can make a choice, I need to know how easy it would be to implement domain authentication between the ‘hosted SharePoint server’ and our internal domain, so users logging in would still be able to use their domain credentials.
How would you implement this? Run a site-to-site VPN (the hosted server won’t be running ISA, but will probably be a Cisco router/firewall). Or open port 636 (SSL LDAP) on both firewalls, to allow secure LDAP communications between the 2 sites?
I have looked at a number of different hosted solutions, including Microsoft's offering. However, it still raises the question of authentication between the hosted provider (whether thats Microsoft) and our Active Directory.
What I need to know is, can an offsite SharePoint solution, authenticate to an internal active directory, and if so, what ports/services do I need to publish!
I am not sure of how other solutions work but Microsoft's one need you to sync your AD with your online SharePoint portal which they probide. I beleieve the only port you need is 443 but i am not that sure about it. Better talk to them cehck their contact info at http://www.microsoft.com/online/support.mspx