Edit

Set up an identity management server: SharePoint

« SQL Server MIM Synchronization Service »

Note

SharePoint Server 2019 setup procedure doesn't differ from SharePoint Server 2019 setup procedure except one extra step that must be taken to unblock ASHX files used by the MIM Portal.

Note

This walkthrough uses sample names and values from a company called Contoso. Replace these with your own. For example:

  • Domain controller name - corpdc
  • Domain name - contoso
  • MIM Service Server name - corpservice
  • MIM Sync Server name - corpsync
  • SQL Server name - corpsql
  • Password - Pass@word1

Install SharePoint 2019

Note

The installer requires an Internet connection to download its prerequisites. If the computer is on a virtual network that doesn't provide Internet connectivity, add an extra network interface to the computer that provides a connection to the Internet. This can be disabled after installation is completed.

Follow these steps to install SharePoint 2019. After you finish installation, the server will restart.

  1. Launch PowerShell as a domain account with local admin on the corpservice and sysadmin on SQL database server we'll use out contoso\miminstall.

    • Change to the directory where SharePoint was unpacked.

    • Type the following command.

    .\prerequisiteinstaller.exe

  2. After SharePoint prerequisites are installed, install SharePoint 2019 by typing the following command:

    .\setup.exe

  3. Select the complete server type.

  4. After the install completes, run the wizard.

Run the wizard to configure SharePoint

Follow the steps lined out in the SharePoint Products Configuration Wizard to configure SharePoint to work with MIM.

  1. On the Connect to a server farm tab, change to create a new server farm.

  2. Specify this server as the database server like corpsql for the configuration database, and Contoso\SharePoint as the database access account for SharePoint to use.

  3. Create a password for the farm security passphrase.

  4. In the configuration Wizard we recommend selecting MinRole type of Front-end

  5. When the configuration wizard completes configuration task 10 of 10, select Finish and a web browser will open..

  6. If prompted the Internet Explorer popup, authenticate as Contoso\miminstall (or the equivalent administrator account) to proceed.

  7. In the web wizard (within the web app) select Cancel/Skip.

Configure SharePoint server Subscription Edition policies

To configure the required local security policies for SharePoint Server Subscription Edition, follow these steps:

  1. Launch the local security policy program.
  2. Navigate to Local Policies > User Rights Assignment.
  3. Include your AppPool account and the SQLServer account in the following policies:
    • Act as part of the operating system
    • Impersonate a client after authentication

Prepare SharePoint to host the MIM Portal

Note

Initially, SSL won't be configured. Be sure to configure SSL or equivalent before enabling access to this portal.

  1. Launch SharePoint 2019 Management Shell and run the following PowerShell script to create a SharePoint 2019 Web Application.

    New-SPManagedAccount ##Will prompt for new account enter contoso\mimpool 
$dbManagedAccount = Get-SPManagedAccount -Identity contoso\mimpool
New-SpWebApplication -Name "MIM Portal" -ApplicationPool "MIMAppPool" -ApplicationPoolAccount $dbManagedAccount -AuthenticationMethod "Kerberos" -Port 80 -URL http://mim.contoso.com

    Note

    A warning message appears saying that Windows Classic authentication method is being used, and it may take several minutes for the final command to return. When completed, the output indicates the URL of the new portal. Keep the SharePoint 2019 Management Shell window open to reference later.

  2. Launch SharePoint 2019 Management Shell and run the following PowerShell script to create a SharePoint Site Collection associated with that web application.

    $t = Get-SPWebTemplate -compatibilityLevel 15 -Identity "STS#1"
$w = Get-SPWebApplication http://mim.contoso.com/
New-SPSite -Url $w.Url -Template $t -OwnerAlias contoso\miminstall -CompatibilityLevel 15 -Name "MIM Portal"
$s = SpSite($w.Url)
$s.CompatibilityLevel

    Note

    Verify that the result of the CompatibilityLevel variable is “15”. If the result is other than “15”, then the site collection wasn't created the correct experience version; delete the site collection and recreate it.

    Important

    SharePoint Server 2019 uses different web application property to keep a list of blocked file extensions. Therefore, in order to unblock.ASHX files used by the MIM Portal three extra commands must be manually executed from the SharePoint Management Shell.
    Execute the next three commands for SharePoint 2019 only:

    $w.BlockedASPNetExtensions.Remove("ashx")
$w.Update()
$w.BlockedASPNetExtensions

    Note

    Verify that the BlockedASPNetExtensions list doesn't contain ASHX extension anymore otherwise several MIM Portal pages will fail to render correctly.

  3. Disable SharePoint Server-Side Viewstate and the SharePoint task "Health Analysis Job (Hourly, Microsoft SharePoint Foundation Timer, All Servers)" by running the following PowerShell commands in the SharePoint 2019 Management Shell:

    $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService;
$contentService.ViewStateOnServer = $false;
$contentService.Update();
Get-SPTimerJob hourly-all-sptimerservice-health-analysis-job | disable-SPTimerJob

    Important

    Applicable to MIM builds prior to 4.6.673.0 only. If deploying on SharePoint 2016 with September 2023 updates or later, the following commands must also be manually executed from the SharePoint Management Shell.

    $f = get-spfarm
$f.AddGenericAllowedListValue("WebPartSupportedBoundPropertyNames","data-title-text")
$f.AddGenericAllowedListValue("WebPartSupportedBoundPropertyNames","data-link-to-tab-text")
$f.update() 
iisreset

  4. On your identity management server, open a new web browser tab, navigate to http://mim.contoso.com/ and login as contoso\miminstall. An empty SharePoint site named MIM Portal is shown.

    MIM Portal at http://mim.contoso.com/ image

  5. Copy the URL, then in Internet Explorer, open Internet Options, change to the Security tab, select Local intranet, and click Sites.

    Internet Options image

  6. In the Local intranet window, click on Advanced and paste the copied URL in the Add this website to the zone text box. Select Add then close the windows.

  7. Open the Administrative Tools program, navigate to Services, locate the SharePoint Administration service, and start it if it isn't already running.

« SQL Server MIM Synchronization Service »

  • Last updated on