Creating a Claims to Email Security Provider for SharePoint Online

CES 7.0.7433+ (February 2015)

To create a Claims to Email security provider for SharePoint Online

1. On the Coveo server, access the Administration Tool (see Opening the Administration Tool).

2. In the Administration Tool, select Configuration > Security.

3. In the navigation panel on the left, select Security Providers.

4. In the Security Providers page, click Add.

5. In the Modify Security Providers page:

   

   1. In the Name box, enter a descriptive name of your choice for this security provider instance.

   2. In the Security Provider Type drop down, select Claims to Email Security Provider for SharePoint Online.

   3. In the User Identity drop-down list, select the user identity that you created to crawl your SharePoint Online (see Microsoft SharePoint Connector Deployment Overview or Microsoft OneDrive for Business Connector Deployment Overview).

   4. In the Security Provider section:

      1. In the drop-down list, select the provider that recognizes your users by their email addresses or active directory accounts (see Configuring an Email Security Provider or Configuring an Active Directory Security Provider).

         Notes:

         • Blocked users (admin Office 365, active users, settings, sign-in status) are not expanded to email users.

         • The list of following SharePoint well-known claims are expanded to email users:

           • c:0(.s|true (everyone)

           • c:0-.f|rolemanager|spo-grid-all-users (everyone but external)

           • c:0!.s|forms%3amembership [all federated (sync) and native (cloud) users]

      2. When needed, click Add, Edit, or Manage security providers respectively to create, modify, or manage email or active directory security providers.

   5. In the Windows Azure Active Directory Module for Windows PowerShell box, ensure that the MSOnline.psd1 file is available at the default location (C:\Windows\System32\WindowsPowerShell\v1.0\Modules\MSOnline\MSOnline.psd1) on your Coveo Master server following the installation of the Windows Azure AD Module installation (see Installing the Windows Azure AD Module for Windows PowerShell). Change the path if needed.

      Notes:

      • Windows PowerShell is used to retrieve Office 365 users and domains.

      • The default value should be the right value, but make sure the referenced module is installed and is located at this path.

   6. Ensure that the Allow Complex Identities option is selected.

   7. Click Save.

   8. This security provider must be selected in the Security Provider for SharePoint Users parameter of the SharePoint security provider set on your SharePoint or OneDrive for Business source (see Creating a SharePoint Security Provider or Creating a Security Provider for the SharePoint Legacy Connector) .