The document provides comprehensive insights into real-world add-in development for SharePoint, emphasizing key areas such as network optimization, database importance, caching, and performance. It covers various deployment models, including SharePoint-hosted and Azure options, and details security permissions, customization challenges, and effective navigation strategies. Additionally, it addresses essential resources for app configuration and distribution while highlighting the risks associated with JavaScript injection and remote event receivers.

1. Real World Add-In Development
ERIC SHUPPS
MVP

2. SPONSORS

3. About Me
@eshupps sharepointcowboywww.sharepointcowboy.com
slideshare.net/eshupps linkedin.com/in/eshupps
Eric Shupps
Office Server MVP

4. Agenda
• Build to Suit
• Make the Network Workf for You
• The Database is King
• Keep Traffic Moving
• Cache In
• Look Good but Perform Better

5. Agenda
•Models
•API’s
•Security
•Customizations
•Deployment

7. MODELS

8. SharePoint Hosted
What Works What Doesn’t

9. Provider Hosted
What Doesn’tWhat Works

10. Azure
What Works What Doesn’t

11. SharePoint Framework
???

12. API’S

13. CSOM

14. JSOM

15. REST

16. DEMO
Throttling Management

17. SECURITY

18. PermissionsAuthorizationAuthentication
On-Premise

19. PermissionsAuthorizationAuthentication
Office 365

20. PermissionsAuthorizationAuthentication
Azure

21. DEMO
Assigning App Permissions in Azure

22. CUSTOMIZATIONS

23. App Web
• Not primary user
context
• Declarative artifacts
or code
• Iterative deployments
destroy content
• Only provisioned via
SPHA or PHA with
declarative artifacts
Host Web
• Code only – no
declarative artifacts
• Requires Cross
Domain calls
• Injection remnants
difficult to remove
Scopes

24. • On-Premise
• Modify and manipulate – do not replace
Master Pages
•PHA: External (CDN)
•SPHA: External or App Web
Dependencies
• On-Premise: Declarative or
Programmatic
• Online: Programmatic
Assets
•Do not rely upon remote event receivers
•Beware the dangers of injection
Retraction
Branding

25. DEMO
JavaScript Injection Issues

26. Data Sources
• Lists
• Managed
Metadata
• Search
• BCS
• External
Components
• Master Pages
• Client Web
Parts
• Scripts
Navigation

27. Sites
What Works What Doesn’t

28. DEPLOYMENT

29. On-Premise
• Apps
• SSL
• DNS
• [PHA] Server to Server (S2S) High Trust or Hybrid Low Trust
Configuration
• [SHA] None
• [PHA] Servers, Networking, Authentication, Admin Access
Resources
•Corporate Catalog
•Developer Site
•Store
Distribution

30. Office 365
• Apps
Configuration
• [SHA] None
• [PHA] Servers, Networking, Authentication, Admin
Access
Resources
• Corporate Catalog
• Developer Site
• Store
Distribution

31. Azure
• AD Apps
• SSL
• DNS
• SSO
• Permissions
Configuration
•Servers, Networking, Authentication, Admin Access
•Azure AD Premium*
Resources
• Admin assignment
Distribution

32. thank you
questions?
live ratings
BLOG URLTWITTER HANDLE
spca.biz/YOURSESS
C
on
ht
Yo
be
C
htt
C
yo
sp
It
Q
PL