Microsoft Technology Licensing, LLC

Patrick Simek

Alexander Hopmann

Joe Keng Yap

Balinder Malhi

Ankur Jauhari

Samer Fouad Sawaya

Roberta Cannerozzi

Randy David Thomson

Roshane Silva

Simon Bourdages

Wenyu Cai

Sean L Livingston

Ron Shimon Estrin

Zachary Adam Koehne

Ghania A Moussa

Prashant Gaurav

Mahadevan Thangaraju

Yu-Ting Lin

Trung Duc Nguyen

Sukhvinder Singh Gulati

Ben Canning

Jason Matthew Cahill

Eric B Fox

Le Chang

Marc Keith Windle

Kalyan K Kona

Mangalam Rathinasabapathy

Zach Rosenfield

Elisabeth Olson

Harpreet Miglani

Xinghuo Zeng

Lei Sun

Wei-qiang Guo

Erick Raymundo Lerma

Zohar Raz

Corey Roussel

Min Shao

Sean Lamont Grant Livingston

Mustafaraj M Dhrolia

Ilker Celikyilmaz

Gaia Carini

Jeffrey Lamar McDowell

Fuyuan Bie

Brad Smith

Tarun Bhatia

Marc Windle

Dylan Thomas Nunley

Guilherme Rodrigues Nogueira De Souza

Dan Rosenthal

Troy Ralph Starr

A cloud-based migration system exposes a source-independent application programming interface for receiving data to be migrated. The data is uploaded and stored as a single entity in a cloud-based storage system. A migration system then accesses the migration package and begins migrating the data to its destination, from the cloud-based storage system.

Data migration to a cloud computing system

The techniques described herein facilitate scope-based certificate deployment for secure dedicated tenant access in multi-tenant, cloud-based content and collaboration environments. In some embodiments, a method is described that includes receiving an incoming authentication request from an access system, wherein the authentication request includes metadata, extracting the metadata from the authentication request, and processing the metadata to identify a tenant corresponding to the request. A tenant-specific certificate associated with the tenant is then accessed and provided to the access system for validation by a third-party certificate authority.

Scope-based certificate deployment

Various systems and methods for domain authentication are described herein. In an example, the method may include detecting a domain from a request of a tenant for access to a farm. The method may also include identifying a presence of a site ID from a database of the farm based on the domain. The method may also include sending an authentication request to a default site or a custom site, the authentication request managed through a site manager based on the identified presence of the site ID in the database of the farm. The method may also include routing traffic from the tenant to the farm in response to satisfaction of the authentication request.

Domain authentication

Aspects of the present disclosure provide systems and methods for directly transferring tenant data hosted on a source domain to a target domain, wherein the source and target domains are associated with different server farms. Additionally, where the source domain is managed by a source management layer and the target domain is managed by target management layer, which source and target management layers are not in a trust relationship. Aspects describe establishing a secure, direct communication bus between the source and target management layers in order to accomplish a plurality of steps involved in transferring the tenant, wherein tenant data transferred thereon is encrypted. In example aspects, the direct communication bus terminates upon completion of the tenant data transfer.

Orchestrating work across domains and work streams

In one embodiment, a network file management systemmay use a persistent metadata storeand an access control listto facilitate a batch rollout. The network file management systemmay maintain a content database. A network file management systemmay store a metadata set for the content databasein a separate persistent metadata store

Large scale network system upgrade

Technologies are described for updating a live system with static changes. According to some examples, changes such as installing and/or removing features may be applied to a cloud based service in live environment without disrupting the service. New software may be patched and installed on an upgraded machine (i.e., server). New features, diagnostics, and language packs may be added. Existing features and certificates may be removed. To accomplish these, new software to be installed and existing software to be removed may be detected. Removal and additions may be performed without preparation and activation of replacement farms.

Updating live system with static changes

Disclosed herein are systems, methods, and software to enhance the upgrade process with respect to software service deployments. In at least one implementation, a user interface to an administrative portal for administering an initial deployment of a software service is presented and a notification that an upgrade is available is surfaced therein. In response to a selection of the notification in the user interface, upgrade controls are surfaced in the user interface for controlling a pace of the upgrade with respect to service components of the initial deployment. The upgrade is then applied incrementally to the service components based least in part on the pace of the upgrade specified via the upgrade controls.

Dynamic pacing for service upgrades

Objects are placed on hosts using hard constraints and soft constraints. The objects to be placed on the host may be many different types of objects. For example, the objects to place may include tenants in a database, virtual machines on a physical machine, databases on a virtual machine, tenants in directory forests, tenants in farms, and the like. When determining a host for an object, a pool of hosts is filtered through a series of hard constraints. The remaining pool of hosts is further filtered through soft constraints to help in selection of a host. A host is then chosen from the remaining hosts.

Placing objects on hosts using hard and soft constraints

An online service includes managed databases that include one or more tenants (e.g. customers, users). A multi-tenant database may be split between two or more databases while the database being split continues processing requests. For example, web servers continue to request operations on the database while content is being moved. After moving the content, tenant traffic is automatically redirected to the database that contains the tenant's content.

Dynamically splitting multi-tenant databases

Various technologies and techniques are disclosed for searching for and extracting data from databases of content management applications. User input is received to connect to a database or database snapshot of an application, and a connection is established. When the database is not part of a current live instance of the application, an emulation is performed such that the database is treated like it is attached to the current live instance of the application. The user is able to browse and/or search for content, including documents, in the database or database snapshot without having to explore individual site collection structure and user interfaces of individual sites. A site collection user interface (UI), a site selector UI, and/or a list selector UI, for example, provide data entry fields for entering search requirements. Unattached databases can be managed using commands, such as using an object model or command line.

Exploring attached and unattached content databases

Various technologies and techniques are disclosed for extracting data from databases of content management applications. Input is received from a user to connect to a database of a content management application. A connection is established to the database. When the database is not part of a current live instance of the content management application, an emulation is performed so that the database is treated like it is actually attached to the current live instance of the content management application. The user is able to browse the database. Unattached databases of a content management application can be managed using one or more commands, such as using an object model or command line. Orphaned databases can be detected and deleted from the content management application.

Techniques for extracting data from content databases

Growing community of inventors

Redmond, WA, United States of America

Patrick Simek