1. Leveraging User Profiles and My Sites in SharePoint 2010 and 2013
Beatrice Baciu - Architect
Derek Cash-Peterson - Practice Director

2.
@BeatriceBaciu
@spdcp

3. The Challenge Centralize all profile data Searching profile data
Integrate with other systems of record
Most of our clients wanted to centralize info about their users and often
Notion of employee directory came up
How do we find something in this place?
On of the challenges was always the integration
How do we tie this central ‘repository’ to user-specific data?

4. Agenda How does the user profile service work?
The benefits of the user profile service.
How does the user profile relate to MySites?
Configuring user profile service
Ways to develop against the user profile service in 2010 & 2013
As we built this talk, we asked ourselves: what do we want you, the listeners, to take away from this session?
And this is how we came up with this agenda.
We will discuss the benefits of the UPS by showing you a real-life example ; we have noticed that devs don’t jump at the opportunity of working with he UPS, esp bc its finnicky
How the ups could be used in a real-life scenario in conjunction with mysites
Even if more unorthodox, something we want to sharew with you to give you an idea how toi play with these components

5. What We Are Not Talking About
Enterprise Social
Tagging/Notes
Basic configuration of User Profile Service
What we are not talking about: Social, tagging, etc.

6. How Does the User Profile Service Work
External System ?
FIM
SharePoint
BCS
User Profile Service Application
Active Directory
Direct Active Directory Import C#

7. Benefits of the User Profile Service
Allows centralized location for all user properties
Aggregation of user properties regardless of source
Out-of-the-box storage of links to user mysites
Individual MySite provides indivudal location to manage and store documents, links, etc.
Easy consumption of data in code
Centralized location for all user properties, regardless of source AD
Custom membership provider databases
2. Aggregation of user properties regardless of source
Department may come from AD but Hobbies may come from a database on the same user profile
3. Out-of-the-box site directory for user mysites
4. My Site gives a particular organization a per user location to manage and store documents, links, etc.
5. Automatic update of above site directory
6. Easy consumption of data in code
Server API/PS
SCOM
REST

8. How does the user profile relate to MySites
There is a link to the users MySite in the User Profile
MySite provides user with an interface to edit profile data
MySite Provides an individual repository for users that is security trimmed
Aggregation of all user profile properties in one source
Link in UPS to Mysites
TJ updates ups after site creation
Ms provides profile mgt by user
Individual repository for user –sec trimmed
You Can Have UPS without MySites but you can’t have MySites without the UPS
To configure MySites you only need to have the UPS configured. User Profiles are automatically created when a user creates their MySite

9. User Profile Service Demo Configuration with ADFS and a custom database
Identity claim NOT ad account name
Claim user identifier
Domain user account

10. Use AD/ADFS as primary sync connection
Use BCS to import additional profile properties
Use property mapping to aggregate the User Profile
mail <-> Claim User Identifier for OOB properties (AD-like) –ADFS
mail <-> Work
Work <-> LowerUserName from database (primary key)
new props mapped to BDC columns
If using SPD, the primary key will be used as the identifier; modify the BDCM file yourself and use a unique logical key (e.g. LoweredUserName)
Troubleshooting:
consider restarting the Sync service (connections are not available anymore)
Consider restarting the timer job (various sync issues)

11. Recap Use AD/ADFS as primary sync connection
Use BCS to import additional profile properties
Use property mapping to aggregate the User Profile
If using SPD, the primary key will be used as the identifier; modify the BDCM file yourself and use a unique logical key
Permissions in BDC
Use AD/ADFS as primary sync connection
Use BCS to import additional profile properties
Use property mapping to aggregate the User Profile
mail <-> Claim User Identifier for OOB properties (AD-like) –ADFS
mail <-> Work
Work <-> LowerUserName from database (primary key)
new props mapped to BDC columns
If using SPD, the primary key will be used as the identifier; modify the BDCM file yourself and use a unique logical key (e.g. LoweredUserName)
Troubleshooting:
consider restarting the Sync service (connections are not available anymore)
Consider restarting the timer job (various sync issues)

12. Troubleshooting
Connections Disappear: consider restarting the User Profile Synchronization Service
Random Sync issues: consider restarting the SharePoint Timer Service
when MySite gets created, user profile gets created if not there

13. Limitations BDC cannot be the primary sync connection
Duplicate profiles
Once sync connection is deleted, profiles need to be purged via PS
Mapping two AD attributes to the same SharePoint property is not supported
BDC cannot be the primary sync connection, just an addition of mapped properties to existing user profiles imported via AD/ADFS
Double profile issue requires mapping of account name property (if both AD and ADFS in case of migrations)
Once sync connection is deleted, profiles need to be purged via PS

14. User Profile Service in Farm-level scenario

15. Design Approach Educational Institution
Needed a web application to allow teachers to see information about their students as well as report progress and grades
Created a SP 2010 based solution leveraging MySites as a central reposity of data for each student.
Students don’t have access to the MySite
Easy way to create unique sites as new students come on board and easy structure for archiving
Consolidation of student data from UPS and external Student Information System in central repository

16. Coding with the User Profile Service in SharePoint 2010

17. Coding with the User Profile Service in SharePoint 2013

18. User Profile Service Data Access via REST
GET
All current user properties
Get specific property of current user
Get all properties for a specific user
Get specific property for a specific user
Get specific properties of current user (GET)
Get all properties of a given user (GET)
Get specific properties of a given user (GET)
Provision a users’ personal site (POST)
Set the current users’ profile picture (POST)
Changing user profile properties is NOT IMPLEMENTED(same for CSOM,JSOM)
Deletion is NOT IMPLEMENTED (same for CSOM,JSOM)
Office 365:

19. User Profile Service Data Access via REST
POST
Provision user MySite
Set current user’s profile picture
NOTES
Changing user’s profile properties is not implemented in REST or CSOM
Deletion of user profiles is not implemented in REST or CSOM
o365 authentication uses account names like
Get specific properties of current user (GET)
Get all properties of a given user (GET)
Get specific properties of a given user (GET)
Provision a users’ personal site (POST)
Set the current users’ profile picture (POST)
Changing user profile properties is NOT IMPLEMENTED(same for CSOM,JSOM)
Deletion is NOT IMPLEMENTED (same for CSOM,JSOM)
Office 365:

20. User Profile Service Data Access via REST
var inputParameters = {
“props”: {
"__metadata": { "type": "SP.UserProfiles. GetUserProfilePropertyFor" },
"accountName": "demo\bbaciu",
"propertyName": [“FirstName”]
}};
var requestHeaders = {
"Accept": "application/json;odata=verbose",
"X-RequestDigest": jQuery("#__REQUESTDIGEST").val()};
jQuery.ajax({
url:_spPageContextInfo.webAbsoluteUrl +
"/_api/SP.UserProfiles.PeopleManager/GetUserProfilePropertyFor",
type:"POST",
data: JSON.stringify(inputParameters ),
contentType : "application/json;odata=verbose",
headers: requestHeaders,
success:function(data){
//read property },
error:function(jqxr,errorCode,errorThrown){
//handle error }
});

21. User Profile Service Data Access via CSOM
SP.SOD.executeOrDelayUntilScriptLoaded(getUserProperties, 'SP.UserProfiles.js');
function getUserProperties() {
var targetUser = "domainName\\username”;
var clientContext = new SP.ClientContext.get_current();
var peopleManager = new SP.UserProfiles.PeopleManager(clientContext);
personProperties = peopleManager.getPropertiesFor(targetUser);
clientContext.load(personProperties);
clientContext.executeQueryAsync(onRequestSuccess, onRequestFail); }
function onRequestSuccess()
//we distinguish between user properties and user profile properties
var messageText = " \"DisplayName\" property is " + personProperties.get_displayName();
messageText += "<br />\"Department\" property is " +
personProperties.get_userProfileProperties()['Department'];

22. Recap How the user profile service works.
The benefits of the user profile service.
How does the user profile relate to MySites?
Configuring user profile service
Ways to develop against the user profile service in 2010 & 2013
Use AD/ADFS as primary sync connection
Use BCS to import additional profile properties
Use property mapping to aggregate the User Profile
mail <-> Claim User Identifier for OOB properties (AD-like) –ADFS
mail <-> Work
Work <-> LowerUserName from database (primary key)
new props mapped to BDC columns
If using SPD, the primary key will be used as the identifier; modify the BDCM file yourself and use a unique logical key (e.g. LoweredUserName)
Troubleshooting:
consider restarting the Sync service (connections are not available anymore)
Consider restarting the timer job (various sync issues)

23. Thank You!
Beatrice Baciu @BeatriceBaciu
Derek Cash-Peterson @spdcp
BlueMetal Architects
Blog.bluemetal.com
@bluemetalinc