PushingtheBoundariesReal-WorldSharePointAdd-InDevelopment

@eshupps sharepointcowboywww.sharepointcowboy.com

slideshare.net/eshupps linkedin.com/in/eshupps

EricShuppsSharePointServerMVP

Agenda

WhatWorks WhatDoesn’t

WhatDoesn’tWhatWorks

WhatWorks WhatDoesn’t

PermissionsAuthorizationAuthentication

PermissionsAuthorizationAuthentication

PermissionsAuthorizationAuthentication

AppWeb

• Notprimaryusercontext

• Declarativeartifactsorcode

• Iterativedeploymentsdestroycontent

• OnlyprovisionedviaSPHAorPHAwithdeclarativeartifacts

HostWeb

• Codeonly– nodeclarativeartifacts

• RequiresCrossDomaincalls

• Injectionremnantsdifficulttoremove

• On-Premise• Modifyandmanipulate– donotreplaceMasterPages

•PHA:External(CDN)•SPHA:ExternalorAppWebDependencies

• On-Premise:DeclarativeorProgrammatic• Online:ProgrammaticAssets

•Donotrelyuponremoteeventreceivers•Bewarethedangersofinjection

Retraction

DataSources

• Lists• ManagedMetadata

• Search• BCS• External

Components

• MasterPages• ClientWebParts• Scripts

WhatWorks WhatDoesn’t

• Apps• SSL• DNS• [PHA]ServertoServer(S2S)HighTrustorHybrid LowTrust

Configuration

• [SHA]None• [PHA]Servers, Networking,Authentication,AdminAccess

Resources

•CorporateCatalog•Developer Site•Store

Distribution

• Apps

Configuration

• [SHA]None• [PHA]Servers, Networking,Authentication,AdminAccess

Resources

• CorporateCatalog• Developer Site• Store

Distribution

• ADApps• SSL• DNS• SSO• Permissions

Configuration

•Servers, Networking,Authentication,AdminAccess•AzureADPremium*

Resources

• Adminassignment

Distribution