Download to read offline
Uploaded byVincent Biret
MS365 Dev Bootcamp Montreal 2019 - Microsoft graph introduction
This document introduces Microsoft Graph and describes how to build applications that connect to Microsoft services like Office 365 using the Microsoft Graph API. It provides an overview of Microsoft Graph and how it acts as a gateway to access user, group and organizational data from Microsoft services. It also describes the various authentication options for Microsoft Graph applications and code samples for building single page applications with React that are authenticated with Azure AD using the Microsoft Graph SDK.
More Related Content
Similar to MS365 Dev Bootcamp Montreal 2019 - Microsoft graph introduction
More from Vincent Biret
MS365 Dev Bootcamp Montreal 2019 - Microsoft graph introduction
- 1.
- 2. Passionate about technologies,development and community Vincent Biret @baywet bit.ly/vince365 Microsoft Office Dev MVP Azure and Office 365 developer @ 2toLead
- 4. Build apps withthe Microsoft Graph REST API Build applications using Microsoft Graph REST API
- 5. Microsoft Graph REST API Introto the Microsoft Graph REST API Getting started SDKs & Code Samples Resources
- 6. Microsoft 365 Platform web,device, and service apps Extend Microsoft 365 experiences 1 iOS/Android/Windows/Web Build your experience Microsoft Graph
- 7. Microsoft Graph Gateway toyour data in the Microsoft-cloud Users, Groups, Organizations Outlook SharePoint OneDrive Teams Planner Excel OneNote Activities Device Relay Commands Notifications Azure AD Intune Identity Manager Advanced Threat Analytics Advanced Threat Protection Mail, Calendar, Contacts and Tasks Sites and Lists Drives and Files Channels, Messages Tasks and Plans Spreadsheets Notes, and more… Identity Management Access Control Synchronization Domains Administrative Units Applications and Devices Advanced Threat Analytics Advanced Threat Protection Alerts Policies and more… Office 365 Windows 10 Enterprise Mobility + Security https://graph.microsoft.com
- 8. Microsoft Graph, gatewayto Office 365 Single resource that proxies multiple Microsoft services Allows for easy traversal of objects and relationships Simplifies token acquisition and management Eliminates the need to traditional discovery (using “me” and “myorganization”)
- 9. Office 365 directAPI Endpoints Direct API endpoints for all the Office 365 Services may also be invoked Outlook, OneDrive, OneNote, etc. Direct endpoints have new functionality before it is exposed via the Graph API Examples: Outlook web hooks Time zone on calendar
- 10. Accessing the MicrosoftGraph Direct REST API • Any platform • Any language • Any framework Native SDKs • Utilize framework & platform specific implementations • Abstracts the details of constructing & processing REST requests over HTTP • .NET, iOS, Android, PhP, Ruby, JavaScript, etc.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
- 18.
- 19.
- 20.
- 21.
- 22.
- 23.
- 24.
- 25. Azure AD Applications:The Microsoft Graph Dependency All Microsoft Graph access options (REST API / SDKs) depend on Azure AD Must register an Azure AD application to access the Microsoft Graph Use the Azure AD application to authenticate, gain authorization & obtain an access token Access token included in the underlying HTTP request to call the Microsoft Graph endpoint
- 26. Single authentication flowfor Office 365
- 27. Common consent • Singleauth flow for accessing all O365 services • Admin and end-user consent • Secure protocol • OpenID Connect and OAuth 2.0 • No capturing user credentials • Fine-grained access scopes • Long-term access through refresh tokens
- 28. Permissions follow adescription model. Tip: always request the least permissions Permissions/scopes structure specific: .All, .Shared, etc Read, ReadWrite, etc. Target Entity: files, mail, groups, calendars, etc… Ex: User.Read Directory.ReadWrite.All Resource Action Scope
- 29. Authentication Options Azure ADonly Separate auth flow supports Azure AD accounts only Azure AD and Microsoft Accounts Converged auth flow supports Azure AD accounts and Microsoft accounts (LiveID - hotmail.com, etc.)
- 30. Microsoft Account +Azure AD Many apps want to sign users in from both Microsoft account and Azure AD Works with Microsoft Graph
- 31.
- 32. Various supported languagesand platforms SDKs Generally Available ( /v1.0 ) Preview ( /beta ) And Soon
- 33. Build React SPAapps with the Microsoft Graph
- 34. Building Microsoft Graph applications Gettingstarted SDKs & Code Samples Resources
- 35. Creating an Reactsingle page application configured with MSAL for authentication with Azure AD
- 36. Create React singlepage application Create the React SPA User create-react-app graph-tutorial Install additional packages Install some additional packages: react-router- dom, boostrap, reactstrap, fontawesome-free, moment, msal, microsoft-graph-client Design the app Create the stubbed UI view controllers for you’re the app
- 37.
- 38.
- 39.
- 40. Bit.ly/vince365 @baywet slideshare.net/VincentBIRET Thanks!/Questions? VincentBiret Office 365 and Azure Developer, 2toLead @baywet Bit.ly/vince365
Editor's Notes
- #7 Our Office 365 developer vision focuses on the Users’ experience and their data. As a developer you can bring your applications into their user experience. With over 1.2+ billion users of Office Worldwide, this is a huge opportunity to provide a window into your applications. As well as being able to connect into their data and add intelligence to your applications. There are currently 850 million events created a month and a total of 470Pb+ of data stored in the service that can add value to for our Users’.
- #32 Demo graph explorer, samples, modules de formation
- #33 https://github.com/microsoftgraph
- #40 Install-Package “Microsoft.Graph” The Microsoft.Graph.Core package will be installed with Microsoft.Graph as a dependency, as will Newtonsoft.Json.
- #45 Once the access token is acquired, your application continues to call the Graph API without going through the steps to obtain an access token, it just caches it locally and keeps using it. At some point, the token expires. A refresh token is used to obtain a new access token without requiring the user to log in again. To understand why the MSAL library is important, it’s necessary to understand what it is handling for you. Your code follows a simple pattern to acquire a token silently, and if that fails, acquire a token interactively. Your code does not need to manage the login pop up screen, the interaction for obtaining consent, and does not need to manage token lifetimes. The call to /common/OAuth/v2.0/authorize will pop up a login screen and request permissions consent. It is important to cache the refresh token to request a new access token. This is what the MSAL library does for you, there is no action for you as a developer to manage the refresh token. You can create a custom cache for persistence, but MSAL manages the token lifetime. It is important, however, to understand what the library is doing.