Download as PDF, PPTX
Uploaded bySPC Adriatics
The missing key: Azure AD for developers
The document discusses the state of development in Office 365 and the role of Azure Active Directory (Azure AD). It notes that Azure AD protects Office 365 resources accessed from browsers or APIs. It outlines different API versions and features available, including the v1 and v2 application models. The main differences between the models are that v2 accepts both Azure AD and Microsoft accounts, uses authentication scopes instead of resources, and has a new registration portal. However, not all features work yet in v2. The document then provides a detailed overview of the various APIs and their capabilities in different versions. It concludes with noting scenarios like browser to web app and daemon apps that can or cannot yet work in the v2 model.
More Related Content
![[Carius] Skype Online, Teams, and PSTN](https://cdn.slidesharecdn.com/ss_thumbnails/g7jkb2m3rb2ddrfjpy2n-signature-d4523b3bf020616e67040d2a940ba8bf9aeab187b20da49956548f98de22ea12-poli-180606121949-thumbnail.jpg?width=640&height=640&fit=bounds)
![[Collinge] Office 365 Enterprise Network Connectivity Using Published Office ...](https://cdn.slidesharecdn.com/ss_thumbnails/ecs18paulcollingeoffice365enterprisenetworkconnectivityusingpublishedoffice365urlsips-180618091153-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to The missing key: Azure AD for developers
The missing key: Azure AD for developers
- 1. www.winsmarts.com contact@winsmarts.com Azure AD fordevelopers The missing key sahilmalik@winsmarts.com | @sahilmalik
- 2. www.winsmarts.com contact@winsmarts.com Obligatory about meslide .. • Twitter: @sahilmalik • Hands on developer! • C#, SP, O365, JS, TS, Cordova, Electron, iOS, Android, etc. • Worked in 18 countries, 5 continents. • Author of 20+ books, videos, trainings, etc. etc. • MVP for 15ish years. • C#, SharePoint, Office365 • Office Servers and Services, Visual Studio and Development Technologies
- 3. www.winsmarts.com contact@winsmarts.com What am Idoing here? • Two sessions, • This session: Where I put AzureAD and O365 dev in perspective, a lay of the land. And end with a demo. • Another session: Where is more hands on, where we do stuff with TypeScript and Office365. Pretty cool stuff! • So lets get started!!
- 4. www.winsmarts.com contact@winsmarts.com Disclaimer • I donot work for Microsoft • All opinions presented here, are mine
- 5. www.winsmarts.com contact@winsmarts.com The state ofdev in Office365 • Where does AzureAD fit in?
- 6. www.winsmarts.com contact@winsmarts.com Use Sandbox Solutions Don’tuse Sandbox Solutions WTF guys, you have to use ‘em! Sandbox Managed code no no Sandbox declarative ok Doesn’t work anyway
- 7. www.winsmarts.com contact@winsmarts.com SharePoint hosted Apps ProviderHosted Apps Auto Hosted Apps Use Apps SharePoint hosted AddIn Provider Hosted AddIn Auto Hosted AddIn Dead Sucks Somewhat useful
- 8. www.winsmarts.com contact@winsmarts.com SharePoint hosted apps •Poor upgrade story • Limited capability on what they can actually do • Requires wildcard redirect URI • IFrame app parts, use querystrings, which can interfere with your logic • ClientWebPart’s editor area is extremely limited • Branding is hard • UX is hard (resizing, deep linking etc.) • Non-standard CORS • Etc.
- 9. www.winsmarts.com contact@winsmarts.com Provider hosted apps •More complex setup (but not terrible) • Still uses ACS based tokens, but hopefully we will see Azure AD based tokens • Different on-prem and O365. • Can tap into REST and CSOM
- 10.
- 11.
- 12. www.winsmarts.com contact@winsmarts.com Azure AD • ..Is not a replacement for your on prem AD • Protects Office 365 resources • Anything you access from the browser as a user • Anything you access from a program using the API • Can federate authentication to standards based identity providers
- 13. www.winsmarts.com contact@winsmarts.com So what doesOffice 365 have? • Mail • Calendar • Skype4B • Oh and SharePoint.. • .. So much more! • So it needs APIs.
- 14. www.winsmarts.com contact@winsmarts.com Use APIs No wait!Use Discovery Client Screw that! Use Graph Office Graph Microsoft Graph V1 app model V2 app model V1 APIs Beta APIs
- 15. www.winsmarts.com contact@winsmarts.com So what APIsdo we have? • Well there is the v1 app model • Then there is a v2 app model • And there is the v1 APIs • And there are v2 APIs, which is not the same as the v2 app model
- 16.
- 17. www.winsmarts.com contact@winsmarts.com But this stuffis actually good!
- 18.
- 19. www.winsmarts.com contact@winsmarts.com Uses ACS, but canwork with Azure AD .. with some fineprint
- 20. www.winsmarts.com contact@winsmarts.com PHA vs AzureAD based APIs Provider Hosted App • Great for CSOM + REST (SharePoint) • Suitable for single client (internal dev) • Complex setup • Works on prem, but somewhat different from O365 Azure AD based APIs • CSOM + REST not 100% supported • Very suitable for vendors • Very suitable for app stores • Does not work on-prem as of today • Much more solid and robust architecture, but not everything is supported today
- 21. www.winsmarts.com contact@winsmarts.com APIs (v1 andv2) … these slides are green
- 22. www.winsmarts.com contact@winsmarts.com What APIs areavailable today? What APIs are coming later?
- 23. www.winsmarts.com contact@winsmarts.com V1 • User • OneDrive •Outlook mail and calendar • Personal Contact • Groups • Directory • Webhooks Beta • Users (more) • People • Tasks • OneNote • Data extensions • WebHooks (more) • Excel • OneDrive (more) • Outlook mail and calendar (more) • Personal contact (more) • Groups (more) • Organizational contacts • Directory (more)
- 24. www.winsmarts.com contact@winsmarts.com User – v1 Get/Update/Deleteuser details Get/create user mails and mail folders & send mails List/Create calendars, and list/create/delete events, get reminders List/create/delete contacts and contact folders List direct reports, manager, what groups the user belongs to List owned devices/ owned objects/registered devices/createdobjects Assign license to user Groups – check for membership, get groups user is member of. Profile photo – Get/Update http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/user
- 25. www.winsmarts.com contact@winsmarts.com User – Beta FindMeeting Times Get and Update auto reply settings http://graph.microsoft.io/en-us/docs/api-reference/beta/resources/user
- 26. www.winsmarts.com contact@winsmarts.com OneDrive – v1 •Get current user or another user’s drive • Get root folder of drive • List items or changes in drive • Search items in a drive • List children of a drive item • Get recent files • Get shared with me • Get special folders http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/drive • Drive item – get/create/delete/update, get children, download content • Copy and Move item • Search Items • Find changes (for this item and it’s children) • List thumbnails • Create sharing link • Add/List/Delete permissions
- 27.
- 28. www.winsmarts.com contact@winsmarts.com Outlook Mail –v1 http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/message • Get/Update/Delete/Copy a mail • List/Create attachments • Forward/Reply/ReplyAll • Send • Get/Create/List mail folders • Create/List messages in a mail folder • Update/Delete/Copy/Move a mail folder • Get attachments of • Event • Mail • Post • Delete attachment • Get contents of an attachment
- 29. www.winsmarts.com contact@winsmarts.com Outlook Mail –v2 http://graph.microsoft.io/en-us/docs/api-reference/beta/resources/message • Get/Update autoreply settings • On Mail, Data extensions and extended properties • Add/remove/update • On Mail Folders, Data extensions and extended properties • Add/remove/update • Attachment • No changes
- 30. www.winsmarts.com contact@winsmarts.com Outlook Calendar –v1 http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/calendar • List/Create/Get/Update/Delete calendar(s) • List Calendar views • CRUD events • Accept/tentatively accept/decline event • Reminder – dismiss or snooze • List recurrences of events • Manage attachments • CRUD event message (the calendar invite email) • Send/Copy/Move event message • Reply/ReplyAll • Attachments • CRUD calendar(s)
- 31. www.winsmarts.com contact@winsmarts.com Outlook Calendar –v2 http://graph.microsoft.io/en-us/docs/api-reference/beta/resources/calendar • Cancel Event • Data extension and properties on events • Data extension and properties on event messages • Data extensions and properties on calendars • CRUD calendar(s)
- 32. www.winsmarts.com contact@winsmarts.com Group http://graph.microsoft.io/en-us/docs/api-reference/beta/resources/group • List groups •CRUD group • Owner or Member • List • Add • Remove (v1 only) • Add/Remove Favorite • Subscribe/Unsubscribe by mail • Reset unseen count http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/group
- 33. www.winsmarts.com contact@winsmarts.com GroupConversation No changes inbeta • List/create conversation • Get/Delete group conversation • List/Create conversation threads • Accepted senders • List/Create/Delete • Rejected senders • List/Create/Delete http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/conversation
- 34. www.winsmarts.com contact@winsmarts.com GroupConversation Thread No changesin beta • Threads • CRUD • Reply to http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/conversationthread
- 35. www.winsmarts.com contact@winsmarts.com GroupPost http://graph.microsoft.io/en-us/docs/api-reference/beta/resources/post • CRUD Post •Reply/Forward Post • Attachments – CRUD on a post • Data extensions and properties on a post (beta) http://graph.microsoft.io/en-us/docs/api-reference/v1.0/resources/post
- 36. www.winsmarts.com contact@winsmarts.com GroupDirectory • V1 –basically gives you an AzureAD directory group, and you manage using that. • V2 – create/list app role assignments to a directory object
- 37. www.winsmarts.com contact@winsmarts.com Group v2 stuffonly • Get plan(s) for the group – only one plan can be associated with a group today. • Manage notes
- 38. www.winsmarts.com contact@winsmarts.com V2 only –Organizational contacts • CRUD contact • CRUD group • Org Hierarchy • Get Directory object
- 39. www.winsmarts.com contact@winsmarts.com V2 only –OneNote • CRUD • Notes • Notebooks • Sections • Section Groups • Pages • Resources on a page
- 40. www.winsmarts.com contact@winsmarts.com V2 only –Excel • Basically excel services REST API but now online
- 41. www.winsmarts.com contact@winsmarts.com App Model (v1and v2) .. These slides are blue
- 42. www.winsmarts.com contact@winsmarts.com Main differences betweenv1 and v2 • Accept both Azure AD and Microsoft account (live ID) identities • Office 365 Authentication Scopes, not resources. Your app can request additional scopes. • New registration portal. • Not everything works as of now in v2 app model.
- 43. www.winsmarts.com contact@winsmarts.com What works inv2? • Outlook mail, calendar, contacts • The app itself (your custom web apis) • Graph • Works for all O365 users. • Works for some outlook.com users (create a new account if you want it to work)
- 44. www.winsmarts.com contact@winsmarts.com What does notwork in v2? • Stand alone Web APIs (i.e. ApplicationID of the caller and called must be the same) • Daemons • On-Behalf-Of-Flow • Existing apps (new registration portal and registration required)
- 45. www.winsmarts.com contact@winsmarts.com Scenarios • Web Browserto Web Application • JavaScript SPA* • Native App* • Web application calling Web API • Application Identity • Delegated user identity • Daemon * can also call CSOM+REST also with user identity
- 46.