This document discusses authorization methods in SharePoint including OAuth and access tokens. It also summarizes differences between .NET and JavaScript for developing SharePoint solutions. REST APIs are covered as well as options for deploying SharePoint apps such as the App Catalog, Office Store, and private packages. Trust models like high trust using certificates and low trust with Azure ACS are also summarized.

2. @eshupps sharepointcowboywww.sharepointcowboy.com
slideshare.net/eshupps linkedin.com/in/eshupps
Eric Shupps
SharePoint Server MVP

3. Design
Authorization
API’s
Conversion
Deployment

5. Solution
Full
Trust
Sandbox
FeatureManifest
Web
Part
WSP

6. Solution
OAuth REST
DataWebApp
Client

7. SharePoint 2013
Sites ServicesContent
API
Oauth
App
Package HTML/JS Data

9. authorization

11. User requests access App requests
Request Token
Provider returns
Request Token
App builds auth link
w/ Request Token
User requests URL +
Request Token
Provider returns
access token
User requests URL +
Access Token
App validates access
token
Access token
validated
User granted
access
1
2
3

15. .NET
Compiled
Synchronous
Server Side
Supports NTLM

17. JavaScript
Asynchronous
Client Side
Inherited Context
Must Run in SP

19. REST
Asynchronous
Client Side
Remote Endpoints
ODATA

20. REST
O365 Only
Delve
Users FilesGroups
Mail ContactsCalendar

23. Web Parts App Parts
Application Pages Web Pages
Timer Jobs Web Jobs
List Templates Code
Web Templates Provisioning
Event Receivers Remote Event Receivers

26. App
Catalog
Office
Store
Private
Package Validation
No Licensing
Public
App Validation
Licensing Framework

27. High Trust
Certificates
Token Issuers
Client ID’s and Secrets
Low Trust
Azure ACS
Hybrid
Tokens

28. Single Sign On
User & Group Assignment
App Permissions
App Launcher
Azure Portal