Introduction to azure web applications for office and share point developers

Introduction to azure web applications for office and share point developers

• 1.
  Introduction to AzureWeb Applications for Office and SharePoint Developers
• 2.
  @eshupps sharepointcowboywww.sharepointcowboy.com slideshare.net/eshupps linkedin.com/in/eshupps Eric Shupps Microsoft MVP
• 3.
  Agenda
• 4.
  Host Web App WebApp Part SPHosted App API’s Web Site Site Contents
• 5.
  Host Web API’s Azure Web Site App Launcher
• 6.
  Full Trust Coverage Capability Integration Familiarity Add-Ins Contextual PHA/SHA Extensibility Framework X-Platform Customizations Modern Azure Flexible SSO Multi-Tenant Deployment
• 7.
  What Works WhatDoesn’t
• 8.
  Bound to single AD domain Cannot be accessed by other domains Simplified authorization model Owned by single authorizing domain Accessible by any Azure AD domain Authorized by Azure admin for individual domains App owner must manage tenant registration
• 9.
  PermissionsAuthorizationAuthentication
• 10.
  Developers cannot modify login experience User interface is suboptimal Access to resources requires permission definition OAuth tokens for O365 POST to app with user/tenant details App launcher in O365 Users notified of app availability in alerts
• 11.
  Manifest: oauth2AllowImplicitFlow = true Token and authorization endpoints Tenant ID = “common” for multi-tenant WSFED “common” endpoint Non-customizable consent page in MSFT domain GET: https://login.microsoftonline.com/common/oauth2/authorize?client_id={client ID}& response_type=token&redirect_uri={redirectURI}
• 12.
  Application Delegated Minimum: “Sign in and read user profile” Beware permission level restrictions Exchange Yammer Azure AD SharePoint OnlinePower BI Azure Management O365 Management Skype
• 13.
  MANIFEST
• 15.
  Visual Studio 2015 templates are incomplete • Database • Tenants, IssuingAuthorityKeys, SignupTokens •Registration Module • XML Response Parser • Tenant and User Information • Auth Tokens • Federation, Realm and Identity Configuration • HTTPS Redirection • Sign-In Page (optional)
• 17.
  • AD Apps •SSL • DNS • SSO • Permissions • Multi-tenant Configuration •Servers, Networking, Authentication, Admin Access •Azure AD Premium* Resources • Admin Authorization • User/Group Assignment* Distribution
• 18.
  https://github.com/eshupps/SPDemo.AzureAD.REST http://www.slideshare.net/eshupps