Which hybrid topology should I use?

For SharePoint Server 2013 with Office 365

A hybrid environment that uses SharePoint Server 2013 and
SharePoint Online enables solutions that integrate functionality
between services and features such as Search, Microsoft Business
Connectivity Services, and Duet Enterprise Online for Microsoft
SharePoint and SAP in both environments.

+
Online

Microsoft supports three topologies for hybrid SharePoint

solutions. Which will work for you?

On-premises

Hybrid

You decide which hybrid topology to use based on a combination

of the solution you want to use and the users you want to support.

Which solution do you want to use?

SharePoint
Server 2013
Search

Duet Enterprise
Online

Search is supported for any of the topologies, but

keep going to decide which is best for your users

Do you have Internet-based users who

need access to both environments?

For on-premises users,

use the one-way
inbound topology

SharePoint
Online users

Both

For SharePoint Online

users, use the one-way
inbound topology

One-way outbound topology

The on-premises SharePoint Server 2013 farm connects to SharePoint Online.

For Duet Enterprise Online or

Business Connectivity Services, use
the two-way (bidirectional)
topology

For Internet-based users, use

the two-way (bidirectional)
topology

Which sets of users need a hybrid

experience?
On-premises
users

Business
Connectivity
Services

For both types of users, use the

two-way (bidirectional)
topology

One-way inbound topology

SharePoint Online connects to an on-premises SharePoint Server 2013 farm
through a reverse proxy device.

Two-way (bidirectional) topology

The on-premises SharePoint Server 2013 farm connects to SharePoint Online.
SharePoint Online connects to an on-premises SharePoint Server 2013 farm
through a reverse proxy device.

CUSTOMER NETWORK
MICROSOFT DATA CENTER

INTERNET

Office 365 Tenant

MICROSOFT DATA CENTER

INTRANET

Site collection

Primary web
application

Inbound

Local

Search portal:
Local search
results ONLY

Search portal:
Local + Remote
search results

Search portal:
Local search
results ONLY

SharePoint Online
CANNOT QUERY
SharePoint Server 2013

SharePoint Server 2013

CAN QUERY SharePoint
Online

SharePoint Online CAN

QUERY SharePoint Server
2013

SharePoint Search

Reverse
proxy

From SharePoint Online: Users of the SharePoint Online Search

portal can see only local results.

SharePoint Server
2013
Search: Bidirectional
BCS: Supported
Duet: Supported

Outbound

Site collection

Primary web
application

Local/Remote
Search portal:
Local + Remote
search results

SharePoint Server 2013

CANNOT QUERY
SharePoint Online

SUPPORTS
SharePoint Search

INTRANET

Inbound

Local/Remote

From on-premises: On-premises SharePoint Server 2013 users can

see both local and remote search results.

PERIMETER
NETWORK

SharePoint Online

Inbound

SUPPORTS

INTERNET

Office 365 Tenant

Primary web
application

Local/Remote
Search portal:
Local + Remote
search results

Local

MICROSOFT DATA CENTER

Search: One-way inbound

BCS: Supported
Duet: Supported

Outbound

Outbound

INTRANET

SharePoint Server
2013

SharePoint Online

Search: One-way outbound

BCS: Not supported
Duet: Not supported

Site collection

PERIMETER
NETWORK

Office 365 Tenant

SharePoint Server
2013

SharePoint Online

INTERNET

CUSTOMER NETWORK

Local/Remote

Reverse
proxy

SharePoint Online CAN

QUERY SharePoint Server
2013

Search portal:
Local + Remote
search results

SharePoint Server 2013

CAN QUERY SharePoint
Online

SUPPORTS
From on-premises: On-premises SharePoint Server 2013 users can
see only local search results.

SharePoint Search

From on-premises: On-premises SharePoint Server 2013 users can

see both local and remote results.
From SharePoint Online: Users of the SharePoint Online Search
portal can see both local and remote results.

From SharePoint Online: Users of the SharePoint Online Search

portal can see both local and remote results.

Extranet users: If you configure extranet authentication services,

extranet users can log in remotely with an on-premises Active
Directory account and use all available hybrid functionality.

Business Connectivity
Services

From SharePoint Online: Users can perform both read and write
operations. The BCS service connects to an on-premises SharePoint
Server 2013 farm. The BCS service configured on the on-premises
farm brokers the connection to on-premises OData Service
endpoints.
Requires an app for SharePoint or an external list installed on the
SharePoint Online site collection.

Duet Enterprise Online

From SharePoint Online: Users can perform read and write

operations against an on-premises SAP system.
Requires an app for SharePoint on the SharePoint Online site
collection or a Duet Enterprise Online feature.

REQUIRES

REQUIRES
SharePoint Online (Office 365) trusts the on-premises
SharePoint farm

The SharePoint on-premises farm trusts SharePoint Online

(Office 365)
Reverse proxy device

Okay, I ve decided. Now what?

Read about how to configure your chosen topology
at http://aka.ms/sphyb.

2013 Microsoft Corporation. All rights reserved. To send feedback about this documentation, please write to us at ITSPdocs@microsoft.com.

REQUIRES
Two-way trust between environments
Reverse proxy device