Real World Add-In Development

ERIC SHUPPSMVP

SPONSORS

About Me

@eshupps sharepointcowboywww.sharepointcowboy.com

slideshare.net/eshupps linkedin.com/in/eshupps

Eric ShuppsOffice Server MVP

Agenda

• Build to Suit

• Make the Network Workf for You

• The Database is King

• Keep Traffic Moving

• Cache In

• Look Good but Perform Better

Agenda

•Models

•API’s

•Security

•Customizations

•Deployment

MODELS

SharePoint Hosted

What Works What Doesn’t

Provider Hosted

What Doesn’tWhat Works

Azure

What Works What Doesn’t

SharePoint Framework

???

API’S

CSOM

JSOM

REST

DEMO

Throttling Management

SECURITY

PermissionsAuthorizationAuthentication

On-Premise

PermissionsAuthorizationAuthentication

Office 365

PermissionsAuthorizationAuthentication

Azure

DEMO

Assigning App Permissions in Azure

CUSTOMIZATIONS

App Web

• Not primary user context

• Declarative artifacts or code

• Iterative deployments destroy content

• Only provisioned via SPHA or PHA with declarative artifacts

Host Web

• Code only – no declarative artifacts

• Requires Cross Domain calls

• Injection remnants difficult to remove

Scopes

• On-Premise

• Modify and manipulate – do not replaceMaster Pages

•PHA: External (CDN)

•SPHA: External or App WebDependencies

• On-Premise: Declarative or Programmatic

• Online: ProgrammaticAssets

•Do not rely upon remote event receivers•Beware the dangers of injection

Retraction

Branding

DEMO

JavaScript Injection Issues

Data Sources

• Lists

• Managed Metadata

• Search

• BCS

• External

Components

• Master Pages

• Client Web Parts

• Scripts

Navigation

Sites

What Works What Doesn’t

DEPLOYMENT

On-Premise

• Apps

• SSL

• DNS

• [PHA] Server to Server (S2S) High Trust or Hybrid Low Trust

Configuration

• [SHA] None

• [PHA] Servers, Networking, Authentication, Admin Access

Resources

•Corporate Catalog

•Developer Site

•Store

Distribution

Office 365

• Apps

Configuration

• [SHA] None

• [PHA] Servers, Networking, Authentication, Admin Access

Resources

• Corporate Catalog

• Developer Site

• Store

Distribution

Azure

• AD Apps

• SSL

• DNS

• SSO

• Permissions

Configuration

•Servers, Networking, Authentication, Admin Access

•Azure AD Premium*

Resources

• Admin assignment

Distribution

thank you

questions?

live ratings

BLOG URLTWITTER HANDLE

spca.biz/YOURSESS

Change this QR code with the

one that points to your session:

http://spca.biz/YOURSESS

Your 4

be found in the agenda

Create QR code e.g. here:http://www.qr

Change this to include

your session code,

spca.biz/YOURSESS

It has to be the same link as in

QR code.

PLEASE TEST THE LINK