This article is a solution idea. If you'd like us to expand the content with more information, such as potential use cases, alternative services, implementation considerations, or pricing guidance, let us know by providing GitHub feedback.
This solution provides a highly available deployment of SharePoint, by using a load-balanced Azure Active Directory (Azure AD) instance, a highly available SQL always-on instance, and highly available SharePoint resources.
Potential use cases
This solution addresses the need to deliver a highly available intranet capability, by using the latest and greatest supported platforms.
Download an SVG of this architecture.
- Create a resource group to host all Azure based infrastructure and services.
- Create a virtual network in Azure.
- Deploy Windows Servers to host Active Directory services for SharePoint, SQL server service accounts, and machine accounts.
- Deploy SQL Server Always-on for high availability (HA) support for the SharePoint farm.
- Deploy the SharePoint Server instances. In this scenario, we use two frontend servers with distributed cache and two applications with search roles. This gives us high availability.
- Install Azure AD Connect on an on-premises server, to synchronize your identities to Azure Active Directory.
- Optionally configure Active Directory Federation Services on premises, to support federated authentication to Microsoft 365.
- Deploy ExpressRoute or set up a site-to-site VPN link, for administrative access to the servers that are hosted in Azure VMs.
- Set up and provision external access to the hybrid farm that's hosted in Azure VMs.
- Set up and configure hybrid workloads between Microsoft 365 and the SharePoint farm.
- Azure Resource Group: Container that holds related resources for an Azure solution.
- Virtual Network: Provision private networks, and optionally connect to on-premises datacenters.
- Storage Accounts: Enable durable, highly available, and massively scalable cloud storage.
- Azure Active Directory: Synchronize on-premises directories, and enable single sign-on.
- SharePoint Server: Microsoft's collaboration server product.
- Host enterprise SQL Server apps in the cloud.
- Load Balancer: Deliver high availability and network performance to your applications.
- Azure ExpressRoute: Dedicated private network fiber connections to Azure
- VPN Gateway: Establish secure, cross-premises connectivity.
- Azure AD Connect: Synchronize on-premises directories, and enable single sign-on.
- Active Directory Federation Services: Synchronize on-premises directories, and enable single sign-on.
- Hybrid Workloads: Scale between on-premises environments and the cloud.
- Azure Resource Group Documentation
- Virtual Network Documentation
- Storage Documentation
- Active Directory Documentation
- SharePoint Server Documentation
- SQL Server Documentation
- Load Balancer Documentation
- ExpressRoute Documentation
- VPN Gateway Documentation
- Azure AD Connect Documentation
- Active Directory Federation Services Documentation
- Hybrid Workloads Documentation