SlideShare a Scribd company logo
1 of 24
SCALING, SECURING, MANAGING AND
PUBLISHING POWER PLATFORM
CUSTOM CONNECTORS
Eric Shupps | CTO, Apptigent | Microsoft MVP
♡ ♡
Eric Shupps
Office Servers & Services MVP
@eshupps
sharepointcowboy
slideshare.net/eshupps
linkedin.com/in/eshupps
github.com/eshupps
AGENDA
•Architecture
•Development
•Security
•Scalability
•Publishing
ARCHITECTURE
PUTTING THE PIECES TOGETHER
6
Delivery Development
Consumption
DEVELOPMENT
RELEASE MANAGEMENT
• Pipelines and Releases
• Environment targeting
• Security vs. testability
• Resource consumption
• Versioning
• Code
• Specification
• Connector
8
Throttling
Security
Scale
Self-Service
Visual elements
Spec variations
End-to-end integration
First-pass backend validation
CI/CD Pipelines
App service validation
Endpoint reachability
Routing and policies
Paths and methods
Inputs and outputs
Examples and references
TESTING
DEMO
AZURE FUNCTION WITH UNIT TESTS, PIPELINES AND RELEASES IN
AZURE DEVOPS
SECURITY
AUTHORIZATION METHODS
12
Anonymous
• Open
endpoints
• No front-end
user
validation
Basic
• Username
and password
• Clear text
API Key
• Single text
value
• Required for
each
connection
• Sent in
header or
query string
OAuth
• Token-based
user
authorization
• Client ID's,
Secrets and
Reply URL's
Least Secure Most Secure
SECURITY CHALLENGES
• Anonymous/Basic
• Simple but insecure
• Useful for testing and prototyping
• API Key
• Most common for web API’s
• Requires key registration and management solution
• User self-service (”developer”) portal
• OAuth
• Token management infrastructure
• Expiration and re-authorization
• Easy to get wrong, hard to troubleshoot
SCALABILITY
Forwarding
Routing
Filtering
Throttling
Policies
Inbound
Outbound
Processing
Internal
External (Consumption
Tier)
Caching
Metrics
Alerts
Activity Logs
Monitoring
1 2
4 3
TRAFFIC MANAGEMENT
Token or key creation,
refresh and revocation
User feedback, issue
reporting and endpoint
verification.
Expose API definition,
inputs, outputs and
examples.
SUBSCRIPTIONS
DEMO
AZURE API MANAGEMENT
PUBLISHING
18
Download connector package using PACONN
command-line utility and modify packaging files
Submit package to ISV studio. Test in sandbox
environment. Submit PR to public GitHub
repository.
Global deployment by region.
Create and test connector in your tenant
ROADMAP
Create fully functional custom connector in your tenant
Set production logos, colors, descriptions and security method
Test all actions and environments (Power Apps, Flow, Logic
Apps)
Update specification with all references, definitions and
information
CUSTOM CONNECTOR
Download and install Power Platform Connectors CLI
https://github.com/Microsoft/PowerPlatformConnectors/tree/master/tools/paconn-cli
apiDefinition.swagger.json - Update with final spec values and footer
apiProperties.json – Set security, branding and publisher values
settings.json - Modify connector ID only if updating existing submission
Run validation command to analyze package contents
paconn validate --api-def [Path to apiDefinition.swagger.json]
Customer-facing description and instructions.
Not part of the package but required for submission.
PACKAGE
Create a new submission and upload your
custom connector package
Update connector based upon feedback
and re-submit
Add your connector documentation to the public GitHub
repo and submit a PR
Create a new sandbox environment and re-
test all connector actions
ISV STUDIO
DEMO
PACKAGE CREATION AND SUBMISSION
REFERENCES
• Custom connector overview and walkthroughs
• https://docs.microsoft.com/en-us/connectors/custom-connectors/
• Custom connector OpenAPI extensibility
• https://docs.microsoft.com/en-us/connectors/custom-connectors/openapi-
extensions
• Azure API Management
• https://docs.microsoft.com/en-us/azure/api-management/
• Power Platform Connectors Repository
• https://github.com/Microsoft/PowerPlatformConnectors
• Connector Publishing
• https://docs.microsoft.com/en-us/connectors/custom-connectors/paconn-cli
er-apps/

More Related Content

Similar to Scaling, Securing, Managing, and Publishing Power Platform Custom Connectors.pptx

JohnConnollyResumePerformance2017
JohnConnollyResumePerformance2017JohnConnollyResumePerformance2017
JohnConnollyResumePerformance2017
John Connolly
 

Similar to Scaling, Securing, Managing, and Publishing Power Platform Custom Connectors.pptx (20)

apidays LIVE Hong Kong - Orchestrating APIs at Scale by Hieu Nguyen Nhu
apidays LIVE Hong Kong - Orchestrating APIs at Scale by Hieu Nguyen Nhuapidays LIVE Hong Kong - Orchestrating APIs at Scale by Hieu Nguyen Nhu
apidays LIVE Hong Kong - Orchestrating APIs at Scale by Hieu Nguyen Nhu
 
DevSecOps: Putting the Sec into the DevOps
DevSecOps: Putting the Sec into the DevOpsDevSecOps: Putting the Sec into the DevOps
DevSecOps: Putting the Sec into the DevOps
 
DevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as codeDevOps Toolbox: Infrastructure as code
DevOps Toolbox: Infrastructure as code
 
CICD with SharePoint SPFx A useful overview
CICD with SharePoint SPFx A useful overviewCICD with SharePoint SPFx A useful overview
CICD with SharePoint SPFx A useful overview
 
Content Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortalsContent Strategy and Developer Engagement for DevPortals
Content Strategy and Developer Engagement for DevPortals
 
Introduction to Codenvy / JugSummerCamp 2014
Introduction to Codenvy / JugSummerCamp 2014Introduction to Codenvy / JugSummerCamp 2014
Introduction to Codenvy / JugSummerCamp 2014
 
Putting the Sec into DevOps
Putting the Sec into DevOpsPutting the Sec into DevOps
Putting the Sec into DevOps
 
AppSphere 2016 - Automate performance testing with AppDynamics using continuo...
AppSphere 2016 - Automate performance testing with AppDynamics using continuo...AppSphere 2016 - Automate performance testing with AppDynamics using continuo...
AppSphere 2016 - Automate performance testing with AppDynamics using continuo...
 
Webinar June 2017 l Apica LoadTest to compliment HP Loadrunner
Webinar June 2017 l Apica LoadTest to compliment HP LoadrunnerWebinar June 2017 l Apica LoadTest to compliment HP Loadrunner
Webinar June 2017 l Apica LoadTest to compliment HP Loadrunner
 
Automate Software Deployments on EC2 with AWS CodeDeploy
Automate Software Deployments on EC2 with AWS CodeDeployAutomate Software Deployments on EC2 with AWS CodeDeploy
Automate Software Deployments on EC2 with AWS CodeDeploy
 
Apica Company Summary 2016
Apica Company Summary 2016Apica Company Summary 2016
Apica Company Summary 2016
 
Dev Ops on AWS - Accelerating Software Delivery - AWS-Summit SG 2017
Dev Ops on AWS - Accelerating Software Delivery - AWS-Summit SG 2017Dev Ops on AWS - Accelerating Software Delivery - AWS-Summit SG 2017
Dev Ops on AWS - Accelerating Software Delivery - AWS-Summit SG 2017
 
How to Build and Maintain Quality Drupal Sites with Automated Testing
How to Build and Maintain Quality Drupal Sites with Automated TestingHow to Build and Maintain Quality Drupal Sites with Automated Testing
How to Build and Maintain Quality Drupal Sites with Automated Testing
 
JohnConnollyResumePerformance2017
JohnConnollyResumePerformance2017JohnConnollyResumePerformance2017
JohnConnollyResumePerformance2017
 
Chef Automate - Wellington DevOps August 2, 2017
Chef Automate - Wellington DevOps August 2, 2017Chef Automate - Wellington DevOps August 2, 2017
Chef Automate - Wellington DevOps August 2, 2017
 
Provar webinar 15-03-2018
Provar webinar 15-03-2018Provar webinar 15-03-2018
Provar webinar 15-03-2018
 
APIdays Paris - How to Build Your Web API
APIdays Paris - How to Build Your Web APIAPIdays Paris - How to Build Your Web API
APIdays Paris - How to Build Your Web API
 
Enterprise Node - Code Quality
Enterprise Node - Code QualityEnterprise Node - Code Quality
Enterprise Node - Code Quality
 
Gowrisankar_Resume
Gowrisankar_ResumeGowrisankar_Resume
Gowrisankar_Resume
 
Strong practices for rails applications continuous delivery
Strong practices for rails applications continuous deliveryStrong practices for rails applications continuous delivery
Strong practices for rails applications continuous delivery
 

More from Eric Shupps

More from Eric Shupps (20)

App to AppExchange - A Journey from Idea to Market for Salesforce Developers
App to AppExchange - A Journey from Idea to Market for Salesforce DevelopersApp to AppExchange - A Journey from Idea to Market for Salesforce Developers
App to AppExchange - A Journey from Idea to Market for Salesforce Developers
 
Beginners Guide to Custom Connectors for Power Apps and Power Automate
Beginners Guide to Custom Connectors for Power Apps and Power AutomateBeginners Guide to Custom Connectors for Power Apps and Power Automate
Beginners Guide to Custom Connectors for Power Apps and Power Automate
 
OSW06 - A Real World Guide to Building Highly Available Fault Tolerant ShareP...
OSW06 - A Real World Guide to Building Highly Available Fault Tolerant ShareP...OSW06 - A Real World Guide to Building Highly Available Fault Tolerant ShareP...
OSW06 - A Real World Guide to Building Highly Available Fault Tolerant ShareP...
 
OSH01 - Developing SharePoint Framework Solutions for the Enterprise
OSH01 - Developing SharePoint Framework Solutions for the EnterpriseOSH01 - Developing SharePoint Framework Solutions for the Enterprise
OSH01 - Developing SharePoint Framework Solutions for the Enterprise
 
Mastering Modern Authentication and Authorization Techniques for SharePoint, ...
Mastering Modern Authentication and Authorization Techniques for SharePoint, ...Mastering Modern Authentication and Authorization Techniques for SharePoint, ...
Mastering Modern Authentication and Authorization Techniques for SharePoint, ...
 
Developing SharePoint Framework Solutions for the Enterprise (SPC 2019)
Developing SharePoint Framework Solutions for the Enterprise (SPC 2019)Developing SharePoint Framework Solutions for the Enterprise (SPC 2019)
Developing SharePoint Framework Solutions for the Enterprise (SPC 2019)
 
Developing SharePoint Framework Solutions for the Enterprise - SEF 2019
Developing SharePoint Framework Solutions for the Enterprise - SEF 2019Developing SharePoint Framework Solutions for the Enterprise - SEF 2019
Developing SharePoint Framework Solutions for the Enterprise - SEF 2019
 
SharePoint and Office 365 Development Workshop
SharePoint and Office 365 Development WorkshopSharePoint and Office 365 Development Workshop
SharePoint and Office 365 Development Workshop
 
ECS 2018: Introduction to Azure Web Applications
ECS 2018: Introduction to Azure Web ApplicationsECS 2018: Introduction to Azure Web Applications
ECS 2018: Introduction to Azure Web Applications
 
SharePoint 24x7x365 Architecting for High Availability, Fault Tolerance and D...
SharePoint 24x7x365 Architecting for High Availability, Fault Tolerance and D...SharePoint 24x7x365 Architecting for High Availability, Fault Tolerance and D...
SharePoint 24x7x365 Architecting for High Availability, Fault Tolerance and D...
 
Overcoming Gender Imbalance in the Technical Field
Overcoming Gender Imbalance in the Technical FieldOvercoming Gender Imbalance in the Technical Field
Overcoming Gender Imbalance in the Technical Field
 
Mastering Modern Authentication and Authorization for SharePoint and Office A...
Mastering Modern Authentication and Authorization for SharePoint and Office A...Mastering Modern Authentication and Authorization for SharePoint and Office A...
Mastering Modern Authentication and Authorization for SharePoint and Office A...
 
Enterprise Content Management Solutions in SharePoint and Office 365
Enterprise Content Management Solutions in SharePoint and Office 365Enterprise Content Management Solutions in SharePoint and Office 365
Enterprise Content Management Solutions in SharePoint and Office 365
 
Introduction to the Office Dev PnP Core Libraries
Introduction to the Office Dev PnP Core LibrariesIntroduction to the Office Dev PnP Core Libraries
Introduction to the Office Dev PnP Core Libraries
 
SharePoint and Office Development Workshop
SharePoint and Office Development WorkshopSharePoint and Office Development Workshop
SharePoint and Office Development Workshop
 
From Zero to Hero: A Real World Guide to Building High Availability SharePoin...
From Zero to Hero: A Real World Guide to Building High Availability SharePoin...From Zero to Hero: A Real World Guide to Building High Availability SharePoin...
From Zero to Hero: A Real World Guide to Building High Availability SharePoin...
 
SharePoint and Office 365 Performance Best Practices
SharePoint and Office 365 Performance Best PracticesSharePoint and Office 365 Performance Best Practices
SharePoint and Office 365 Performance Best Practices
 
Introduction to Azure Web Applications for Office and SharePoint Developers
Introduction to Azure Web Applications for Office and SharePoint DevelopersIntroduction to Azure Web Applications for Office and SharePoint Developers
Introduction to Azure Web Applications for Office and SharePoint Developers
 
Introduction to Azure Web Applications for Office and SharePoint Developers
Introduction to Azure Web Applications for Office and SharePoint DevelopersIntroduction to Azure Web Applications for Office and SharePoint Developers
Introduction to Azure Web Applications for Office and SharePoint Developers
 
Rev Your Engines - SharePoint Performance Best Practices
Rev Your Engines - SharePoint Performance Best PracticesRev Your Engines - SharePoint Performance Best Practices
Rev Your Engines - SharePoint Performance Best Practices
 

Recently uploaded

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 

Recently uploaded (20)

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
AI+A11Y 11MAY2024 HYDERBAD GAAD 2024 - HelloA11Y (11 May 2024)
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
Introduction to use of FHIR Documents in ABDM
Introduction to use of FHIR Documents in ABDMIntroduction to use of FHIR Documents in ABDM
Introduction to use of FHIR Documents in ABDM
 
WSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering Developers
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelMcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
AI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by AnitarajAI in Action: Real World Use Cases by Anitaraj
AI in Action: Real World Use Cases by Anitaraj
 
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdfRising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024FWD Group - Insurer Innovation Award 2024
FWD Group - Insurer Innovation Award 2024
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 
Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..Understanding the FAA Part 107 License ..
Understanding the FAA Part 107 License ..
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
DBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor PresentationDBX First Quarter 2024 Investor Presentation
DBX First Quarter 2024 Investor Presentation
 

Scaling, Securing, Managing, and Publishing Power Platform Custom Connectors.pptx

  • 1. SCALING, SECURING, MANAGING AND PUBLISHING POWER PLATFORM CUSTOM CONNECTORS Eric Shupps | CTO, Apptigent | Microsoft MVP
  • 3. Eric Shupps Office Servers & Services MVP @eshupps sharepointcowboy slideshare.net/eshupps linkedin.com/in/eshupps github.com/eshupps
  • 6. PUTTING THE PIECES TOGETHER 6 Delivery Development Consumption
  • 8. RELEASE MANAGEMENT • Pipelines and Releases • Environment targeting • Security vs. testability • Resource consumption • Versioning • Code • Specification • Connector 8
  • 9. Throttling Security Scale Self-Service Visual elements Spec variations End-to-end integration First-pass backend validation CI/CD Pipelines App service validation Endpoint reachability Routing and policies Paths and methods Inputs and outputs Examples and references TESTING
  • 10. DEMO AZURE FUNCTION WITH UNIT TESTS, PIPELINES AND RELEASES IN AZURE DEVOPS
  • 12. AUTHORIZATION METHODS 12 Anonymous • Open endpoints • No front-end user validation Basic • Username and password • Clear text API Key • Single text value • Required for each connection • Sent in header or query string OAuth • Token-based user authorization • Client ID's, Secrets and Reply URL's Least Secure Most Secure
  • 13. SECURITY CHALLENGES • Anonymous/Basic • Simple but insecure • Useful for testing and prototyping • API Key • Most common for web API’s • Requires key registration and management solution • User self-service (”developer”) portal • OAuth • Token management infrastructure • Expiration and re-authorization • Easy to get wrong, hard to troubleshoot
  • 16. Token or key creation, refresh and revocation User feedback, issue reporting and endpoint verification. Expose API definition, inputs, outputs and examples. SUBSCRIPTIONS
  • 19. Download connector package using PACONN command-line utility and modify packaging files Submit package to ISV studio. Test in sandbox environment. Submit PR to public GitHub repository. Global deployment by region. Create and test connector in your tenant ROADMAP
  • 20. Create fully functional custom connector in your tenant Set production logos, colors, descriptions and security method Test all actions and environments (Power Apps, Flow, Logic Apps) Update specification with all references, definitions and information CUSTOM CONNECTOR
  • 21. Download and install Power Platform Connectors CLI https://github.com/Microsoft/PowerPlatformConnectors/tree/master/tools/paconn-cli apiDefinition.swagger.json - Update with final spec values and footer apiProperties.json – Set security, branding and publisher values settings.json - Modify connector ID only if updating existing submission Run validation command to analyze package contents paconn validate --api-def [Path to apiDefinition.swagger.json] Customer-facing description and instructions. Not part of the package but required for submission. PACKAGE
  • 22. Create a new submission and upload your custom connector package Update connector based upon feedback and re-submit Add your connector documentation to the public GitHub repo and submit a PR Create a new sandbox environment and re- test all connector actions ISV STUDIO
  • 24. REFERENCES • Custom connector overview and walkthroughs • https://docs.microsoft.com/en-us/connectors/custom-connectors/ • Custom connector OpenAPI extensibility • https://docs.microsoft.com/en-us/connectors/custom-connectors/openapi- extensions • Azure API Management • https://docs.microsoft.com/en-us/azure/api-management/ • Power Platform Connectors Repository • https://github.com/Microsoft/PowerPlatformConnectors • Connector Publishing • https://docs.microsoft.com/en-us/connectors/custom-connectors/paconn-cli er-apps/