SharePoint 2016 and 2013 configured with ADFS authentication

Yvan Duhamel 提供
上次更新时间: 2018/2/16

This template deploys a full SharePoint 2013 or 2016 environment with 3 VMs (DC, SQL and SharePoint), each with its own public IP address and a subnet protected with a Network Security Group. DC VM is a Domain Controller with AD CS and AD FS configured, and 2 additional DNS zones to support SharePoint apps. SharePoint (2013 or 2016) VM is configured with 1 web application and 2 zones. Default zone uses Windows authentication and Intranet zone uses federated authentication with ADFS. Latest version of claims provider LDAPCP is installed and configured. User Profile and Apps (addins) services are fully configured in the farm.

此 Azure Resource Manager (ARM) 模板由社区的某个成员(而不是由 Microsoft)创建。每个 ARM 模板都根据其所有者(不是 Microsoft)的许可协议向你授予许可。Microsoft 不对由社区成员提供并授予许可的 ARM 模板负责,并且不针对安全性、兼容性和性能进行筛选。社区 ARM 模板不由任何 Microsoft 支持计划或服务提供支持,按“原样”提供,没有任何种类的担保。

参数

参数名 说明
sharePointVersion Version of SharePoint farm to create.
dnsLabelPrefix Prefix of public DNS names of VMs, e.g. 'dnsLabelPrefix-VMName.region.cloudapp.azure.com'
domainFQDN FQDN of the AD forest to create
addFrontEndToFarm Select whether a SharePoint Front End VM should be provisioned and joined to the farm.
adminUserName Name of the AD and SharePoint administrator. 'administrator' is not allowed
adminPassword Input must meet password complexity requirements as documented for property 'adminPassword' in https://docs.microsoft.com/en-us/rest/api/compute/virtualmachines/virtualmachines-create-or-update
adfsSvcUserName Name of the service account that will run ADFS
sqlSvcUserName Name of the service account that will run SQL Server instance
spSetupUserName Name of the service account that will create and configure the SharePoint farm
spFarmUserName Name of the service account that will run SharePoint central administration and Timer services
spSvcUserName Name of the service account that will run SharePoint service applications
spAppPoolUserName Name of the service account that will run SharePoint web applications
serviceAccountsPassword Password for all service account and SharePoint passphrase. It must meet password complexity requirements as documented for property 'adminPassword' in https://docs.microsoft.com/en-us/rest/api/compute/virtualmachines/virtualmachines-create-or-update
vmDCStorageAccountType Type of storage for the managed disks. Allowed values are "Standard_LRS", "Standard_GRS" and "Premium_LRS"
vmDCSize Size of the DC VM
vmSQLStorageAccountType Type of storage for the managed disks. Allowed values are "Standard_LRS", "Standard_GRS" and "Premium_LRS"
vmSQLSize Size of the SQL VM
vmSPStorageAccountType Type of storage for the managed disks. Allowed values are "Standard_LRS", "Standard_GRS" and "Premium_LRS"
vmSPSize Size of the SQL VM
vmsTimeZone Time zone of the VMs. Type '[TimeZoneInfo]::GetSystemTimeZones().Id' in PowerShell to get the list. Note that 'UTC' works but 'UTC+xx' does NOT work.
vmsAutoShutdownTime The time at which VMs will be automatically shutdown (24h HHmm format). Set value to '9999' to NOT configure the auto shutdown.
_artifactsLocation The base URI where artifacts required by this template are located. When the template is deployed using the accompanying scripts, a private location in the subscription will be used and this value will be automatically generated.
_artifactsLocationSasToken The sasToken required to access _artifactsLocation. When the template is deployed using the accompanying scripts, a sasToken will be automatically generated.

使用模板

PowerShell

New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/sharepoint-adfs/azuredeploy.json
安装和配置 Azure PowerShell

命令行

azure config mode arm
azure group deployment create <my-resource-group> <my-deployment-name> --template-uri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/sharepoint-adfs/azuredeploy.json
安装和配置 Azure 跨平台命令行界面