O365Con18 - Introduction to Azure Web Applications - Eric Shupps

Nov 20, 20180 likes53 views

This document summarizes key aspects of developing multi-tenant applications for Office 365 and Azure Active Directory. It discusses topics such as the application model, security considerations, deployment options, and permissions and authentication methods. Challenges include a simplified authorization model tied to a single domain, lack of customization of the login experience, and incomplete development templates. The document provides guidance on configuration options, required permissions, and leveraging OAuth tokens and Azure AD for multi-tenant authentication.

O365Con18 - Introduction to Azure Web Applications - Eric Shupps

@eshupps sharepointcowboywww.sharepointcowboy.com
slideshare.net/eshupps linkedin.com/in/eshupps
Eric Shupps
Office Servers & Services MVP

Introduction
Model
Security
Creation and Configuration
Deployment

Host Web
API’s
Azure
Web
Site
App Launcher

Bound to single AD domain
Cannot be accessed by other domains
Simplified authorization model
Owned by single authorizing domain
Accessible by any Azure AD domain
Authorized by Azure admin for individual domains
App owner must manage tenant registration

Developers cannot modify login experience
User interface is suboptimal
Access to resources requires permission definition
OAuth tokens for O365
POST to app with user/tenant details
App launcher in O365
Users notified of app availability in alerts

$Manifest: oauth2AllowImplicitFlow = true Token and authorization endpoints Tenant ID = “common” for multi-tenant WSFED “common” endpoint Non-customizable consent page in MSFT domain GET: https://login.microsoftonline.com/common/oauth2/authorize?client_id={client ID}& response_type=token&redirect_uri={redirect URI}$

Visual Studio 2015 templates are incomplete
• Database
• Tenants, IssuingAuthorityKeys, SignupTokens
• Registration Module
• XML Response Parser
• Tenant and User Information
• Auth Tokens
• Federation, Realm and Identity Configuration
• HTTPS Redirection
• Sign-In Page (optional)

AD Apps
SSL
DNS
SSO
Permissions
Multi-tenant
Configuration
Servers, Networking, Authentication, Admin Access
Azure AD Premium*
Resources
• Admin Authorization
• User/Group Assignment*
Distribution

https://www.github.com/eshupps

This document discusses securing APIs with Azure Active Directory (AD) authentication from SharePoint Framework (SPFx) solutions. It introduces the AadHttpClient SDK that can be used to call APIs secured with Azure AD without dealing with OAuth flows directly. The SDK handles retrieving access tokens automatically based on the permissions configured for the calling web part in the Azure AD tenant. The document provides an overview of how AadHttpClient works and links to additional resources on setting up API permissions and enabling cross-origin resource sharing (CORS) for APIs.

SPUnite17 Who Are You and What Do You WantNCCOMMS

This document discusses OAuth and authorization in SharePoint, Office 365, and Azure. It begins with an introduction to OAuth fundamentals, including the roles of clients, resource owners, authorization servers, and resource servers. It then covers OAuth implementation, including configuring trusts between on-premise and cloud-based authorization servers and the steps applications take to request and receive access tokens. The document concludes with additional resources on OAuth and authorization.

O365Con18 - External Collaboration with Azure B2B - Sjoukje ZaalNCCOMMS

This document discusses Azure Active Directory B2B collaboration, which allows organizations to securely share resources and applications with external users. It provides an overview of Azure B2B capabilities, including inviting guest users via email, setting conditional access policies, and customizing the user onboarding experience. The document demonstrates configuring Azure B2B through the Azure portal and PowerShell, and compares external sharing options in Azure B2B and Office 365 applications like SharePoint.

Creating Cloud-Ready Enterprise Applications with the SharePoint 2013 Add-In ...Eric Shupps

This document discusses authorization methods in SharePoint including OAuth and access tokens. It also summarizes differences between .NET and JavaScript for developing SharePoint solutions. REST APIs are covered as well as options for deploying SharePoint apps such as the App Catalog, Office Store, and private packages. Trust models like high trust using certificates and low trust with Azure ACS are also summarized.

SPUnite17 Introduction to Azure Web ApplicationsNCCOMMS

This document discusses key considerations for developing multi-tenant SaaS applications on Microsoft platforms. It covers topics like authentication methods, authorization flows, tenant and user management, permissions, and both technical and non-technical requirements for deployment. Developing multi-tenant apps requires addressing issues like supporting multiple Azure Active Directory tenants, managing authorization across domains, and providing a customizable user experience within platform constraints.

SPTECHCON - Who are You and What Do You Want - Working with OAuth in SharePoi...Eric Shupps

This document discusses OAuth authentication in SharePoint 2013. It provides an overview of OAuth and how it manages identity and handles requests for trusted identity claims. It also covers how OAuth is used for on-premise apps and cloud apps to authorize access between servers, farms, and apps. The document includes an agenda that outlines key concepts like security token services, access tokens, realms, certificates and metadata configuration needed to implement OAuth authentication.

Apps 101 - Moving to the SharePoint 2013 App Model - Presented 7/27/13 at Sha...BlueMetalInc

Introduction to Azure Web Applications for Office and SharePoint DevelopersEric Shupps

This document provides an overview of developing Azure web applications for Office and SharePoint. It discusses hosting web apps on Azure and using the SharePoint hosted app model. It covers authentication, authorization, and permissions when accessing Office 365 APIs from an Azure web app. It also addresses limitations of the out-of-box templates for Azure AD authentication and provides resources for setting up authentication, permissions, and tenant registration for a multi-tenant Azure web app.

O365Con18 - PowerApps build custom forms for SharePoint with Azure Maps - Bra...NCCOMMS

This document discusses using PowerApps to build custom forms for SharePoint with Azure Maps. PowerApps allows building apps, forms, and workflows without code across platforms by connecting to existing systems and data sources. It describes how PowerApps can connect to SharePoint data and embed forms. Using Azure Maps services like geocoding and routing, a demo is shown building a custom form for a SharePoint candidate list that utilizes the candidate's address to call Azure Maps APIs.

Building Apps for SharePoint 2013 by Andrew Connell - SPTechConSPTechCon

Andrew Connell presented on building apps for SharePoint 2013. He discussed the SharePoint app model and app identity. The app model supports apps hosted in Office 365 and on-premises farms. Apps communicate with SharePoint using web services and have their own identity and permissions. Authentication can occur through OAuth or high-trust authentication using server-to-server certificates. Apps can be installed at the site or tenant level and can integrate client-side or server-side code depending on if they are SharePoint-hosted, auto-hosted, or provider-hosted.

SharePoint 2013 “App Model” Developing and Deploying Provider Hosted AppsSanjay Patel

Migrating Legacy On-Premise Applications to SharePoint Online and Windows AzureEric Shupps

This document discusses migrating legacy on-premise solutions to SharePoint Online and Windows Azure. It covers moving solutions to the cloud for benefits like flexibility, scalability, and pay-per-use costs while maintaining performance, stability, and recovery capabilities. Patterns are demonstrated for developing apps that connect to SQL databases and Office 365 using technologies like OAuth, REST, and JavaScript.

Developer’s Independence Day:Introducing the SharePoint App Modelbgerman

The document introduces the SharePoint app model, which modernizes SharePoint development. It discusses moving from the MS DOS application model to a more modern approach with app isolation, process isolation, and app-based permission schemes. It covers SharePoint hosted apps and provider hosted apps, and demonstrates examples of each. The document also discusses accessing SharePoint data through REST APIs and the client-side object model, and authentication approaches like OAuth.

Dear Azure: External collaboration with Azure AD B2BSjoukje Zaal

The document discusses Azure Active Directory B2B, which enables organizations to securely collaborate with external users. It provides key benefits like easy access to apps and data without requiring external directories or accounts. Admins can invite guest users via email or APIs and set access policies. The presentation demonstrates inviting and adding guest users through the Azure portal, PowerShell scripts, a self-service portal sample app, and integrating B2B with SharePoint Online using PowerApps and Flow. Current limitations like potential double MFA and directory limits are also noted.

SharePoint and Office Development WorkshopEric Shupps

This document provides an overview of Eric Shupps' background and areas of expertise including SharePoint add-ins, Office add-ins, Azure web applications, and the SharePoint Framework. It discusses solution design, development models, APIs, tools, languages, and deployment options for these platforms. The document also covers topics like permissions, authorization, authentication, and provides comparisons of what approaches work versus what doesn't work across different development models.

Webinar - Migrating Legacy On Premise Solutions to SharePoint Online and Wind...Eric Shupps

As many organizations move away from on-premise SharePoint deployments in favor of externally hosted solutions, developers will increasingly be called upon to make legacy applications compatible with cloud-based services. In this session we will explore the various options available for creating SharePoint applications in the cloud, discuss the pros and cons of each approach, delve into the technical aspects of cloud development, and provide real-world guidance for creating an on-premise-to-cloud migration strategy.

Azure AD App Proxy Login Scenarios with an On Premises Applications - TSPUGRoy Kim

A presentation at a technology meetup. Roy Kim will walk through various access scenarios and capabilities using Azure AD services and features to access SharePoint 2013/2016 server. This will include a comparison between AD Connect + Azure Application Proxy to publish an internal SharePoint application and 3rd Party Auth0 to assist in federating Azure AD and SSO integration. And also the recently supported Azure AD SAML 1.1 Token. Roy will go through a demo, its architecture, and commentary of pros and cons. At the end you will have a good understanding of the technology capabilities to determine supporting access and user management scenarios.

SPCA2013 - Developing Provider-Hosted Apps for SharePoint 2013NCCOMMS

DevSum: Azure AD B2C Application security made easySjoukje Zaal

This document summarizes a presentation about Azure Active Directory B2C (Azure AD B2C). It discusses what Azure AD B2C is, its key benefits including being highly available, scalable, secure, and flexible. It covers capabilities like default and social identity providers, single sign-on, and multi-factor authentication. It also outlines demo sections covering registering an application, creating user flows, configuring identity providers, customizing the UI, and enabling multi-factor authentication.

Building Push Triggers for Logic AppsBizTalk360

This session will explore a mobile app that can read NFC tags embedded in conference badges, and then translate those to sales leads stored directly in popular SaaS CRM providers. To accomplish this, we will see how to build a custom Push Trigger API App for a Logic App, and then how to invoke a callback from a mobile device. We will also configure the Logic App to receive device events and provide integration with SaaS applications such as Salesforce. Once we have the basics established, we'll dip briefly into the world of Windows IoT to explore a push-button push trigger.

Introduction to Office and SharePoint DevelopmentEric Shupps

Logic apps and PowerApps - Integrate across your APIsSriram Hariharan

Developing a Provider Hosted SharePoint appTalbott Crowell

This document summarizes a presentation about developing provider hosted SharePoint apps. It discusses: 1) What provider hosted apps are and how they are hosted outside of SharePoint and can be developed using any language. 2) The history of customizing SharePoint and how apps differ from past methods like farm solutions. 3) The options for hosting apps, including provider hosted, autohosted, and SharePoint hosted. 4) Considerations for providers like maintaining hosting costs and updating customers. 5) The development process including using Visual Studio and the app manifest to define permissions. 6) How to authenticate with OAuth and make calls to SharePoint using the client-side object model.

Intelligent Cloud Conference: Azure AD B2C Application security made easySjoukje Zaal

Azure Active Directory B2C (Azure AD B2C) is an identity management service that allows customization of how customers interact with applications. It provides secure, scalable authentication with minimal application code. Key capabilities include default and social identity providers, single sign-on, multi-factor authentication, and custom user flows and policies. The demos illustrated creating a user flow, configuring an identity provider, customizing the UI, and enabling multi-factor authentication.

Microsoft Reactor Toronto 5/5/2020 | Azure Kubernetes In Action - Running and...Roy Kim

Azure Kubernetes Service (AKS) is a managed container orchestration service. With Kubernetes continuing to grow in popularity, many developers and IT engineers are curious to get started. Roy will demonstrate hosted microservices applications and the Istio service mesh. Along with how to manage your cluster with the Kubernetes Dashboard, Prometheus, Grafana and Azure Monitor. You will see a practical overview how all these pieces fit together. www.roykim.ca Twitter: @RoyKimYYZ Github: https://github.com/RoyKimYYZ

Azure AD for browser-based application developersBob German

App Model For SharePoint 2013Toni Il Caiser

[Roine] Serverless: Don't Take It LiterallyEuropean Collaboration Summit

Introduction to Azure Web ApplicationsJoAnna Cheshire

This document discusses key considerations for developing multi-tenant SaaS applications on Azure. It covers authentication and authorization approaches, capabilities and limitations of different models like full trust and multi-tenant apps. It also touches on important aspects of configuration like permissions, tenants and keys, deployment requirements and resources needed to properly set up and manage multi-tenant SaaS applications on Azure.

Introduction to azure web applications for office and share point developersJoAnna Cheshire

This document provides an overview of developing web applications for Office and SharePoint using Azure. It discusses hosting web apps on SharePoint or Azure and using the SharePoint app model. The document covers key topics like permissions, authorization, and authentication using Azure Active Directory. It also discusses what works well and limitations of this approach. The agenda outlines content on the host web, app web, SharePoint-hosted apps, APIs, and permissions.

More Related Content

What's hot (20)

O365Con18 - PowerApps build custom forms for SharePoint with Azure Maps - Bra...NCCOMMS

Building Apps for SharePoint 2013 by Andrew Connell - SPTechConSPTechCon

SharePoint 2013 “App Model” Developing and Deploying Provider Hosted AppsSanjay Patel

Migrating Legacy On-Premise Applications to SharePoint Online and Windows AzureEric Shupps

Developer’s Independence Day:Introducing the SharePoint App Modelbgerman

Dear Azure: External collaboration with Azure AD B2BSjoukje Zaal

SharePoint and Office Development WorkshopEric Shupps

Webinar - Migrating Legacy On Premise Solutions to SharePoint Online and Wind...Eric Shupps

Azure AD App Proxy Login Scenarios with an On Premises Applications - TSPUGRoy Kim

SPCA2013 - Developing Provider-Hosted Apps for SharePoint 2013NCCOMMS

DevSum: Azure AD B2C Application security made easySjoukje Zaal

Building Push Triggers for Logic AppsBizTalk360

Introduction to Office and SharePoint DevelopmentEric Shupps

Logic apps and PowerApps - Integrate across your APIsSriram Hariharan

Developing a Provider Hosted SharePoint appTalbott Crowell

Intelligent Cloud Conference: Azure AD B2C Application security made easySjoukje Zaal

Microsoft Reactor Toronto 5/5/2020 | Azure Kubernetes In Action - Running and...Roy Kim

Azure AD for browser-based application developersBob German

App Model For SharePoint 2013Toni Il Caiser

[Roine] Serverless: Don't Take It LiterallyEuropean Collaboration Summit

O365Con18 - PowerApps build custom forms for SharePoint with Azure Maps - Bra...NCCOMMS

Building Apps for SharePoint 2013 by Andrew Connell - SPTechConSPTechCon

SharePoint 2013 “App Model” Developing and Deploying Provider Hosted AppsSanjay Patel

Migrating Legacy On-Premise Applications to SharePoint Online and Windows AzureEric Shupps

Developer’s Independence Day:Introducing the SharePoint App Modelbgerman

Dear Azure: External collaboration with Azure AD B2BSjoukje Zaal

SharePoint and Office Development WorkshopEric Shupps

Webinar - Migrating Legacy On Premise Solutions to SharePoint Online and Wind...Eric Shupps

Azure AD App Proxy Login Scenarios with an On Premises Applications - TSPUGRoy Kim

SPCA2013 - Developing Provider-Hosted Apps for SharePoint 2013NCCOMMS

DevSum: Azure AD B2C Application security made easySjoukje Zaal

Building Push Triggers for Logic AppsBizTalk360

Introduction to Office and SharePoint DevelopmentEric Shupps

Logic apps and PowerApps - Integrate across your APIsSriram Hariharan

Developing a Provider Hosted SharePoint appTalbott Crowell

Intelligent Cloud Conference: Azure AD B2C Application security made easySjoukje Zaal

Microsoft Reactor Toronto 5/5/2020 | Azure Kubernetes In Action - Running and...Roy Kim

Azure AD for browser-based application developersBob German

App Model For SharePoint 2013Toni Il Caiser

[Roine] Serverless: Don't Take It LiterallyEuropean Collaboration Summit

Similar to O365Con18 - Introduction to Azure Web Applications - Eric Shupps (20)

Introduction to Azure Web ApplicationsJoAnna Cheshire

Introduction to azure web applications for office and share point developersJoAnna Cheshire

Azure from scratch part 2 By Girish KalamatiGirish Kalamati

Azure Networking, Azure Storage, Enterprise Azure Active Directory, Daemon or Server application authentication workflow, Worker processes, Daemon, Daemon application to Web API, Azure Active Directory in old azure portal, ASM, Azure active directory and Mutl-tenant applications, Sharding, Federation, Shared singe, RBAC, Differences between AAD and AD DS, Azure AD Subscription models, Azure Domain Names, Manage Users, Groups,Co-Admin Role, Default Azure Active Directory, Adding access to another azure subscription. Contributor, Owner , Roles in Azure Subscriptions, Roles, MFA, Multi-Factor Authentication, How does MFA works, Scenarios for Azure MFA, Setting up MFA in Azure AD, Setting MFA, Azure Authenticator, Hybrid AD solutions, AD DS, Federated Trust, Domain Controller, AD, AAD Connecter, AD FS, AAD, Active Directory Password synchronization, Benefits of Active Directory, Active Directory Replication, vulnerabilities with multiple Domain Controller, Azure AD features, Synchronization with AD Connect, Write-back policies, Azure AD Health COnnect, Installing Azure AD COnnect Health,Integrating Azure AD and SaaS Applications, Benefits of using SaaS Solutions with your products, Benefits of SaaS Solutions, Azure Marketplace, DropBox Integrations with AAD, New Relic Integrations, New Relic, Dropbox, Azure AD Enterprise Application, VSTS integration for Automated Builds, Federation Overview, Claims, Single Sign On, Federated Trusts, Claim based authentications, Federated trusts, Claims Processing, Web Application Proxy, ADFS Proxy, ADFS 2.0 Proxy, How does ADFS proxy works for internal users, How does ADFS proxy works for internal users,Azure AD B2C Directory, B2C applications, Business 2 Customers application, 3rd Party Authentication, Bearer Token, OAuth, 3rd Party Identity Provider, OAuth server, Azure AD B2C Authentication & Authorization, Implementing Azure AD B2C Directory, Setting up Single Sign On with Facebook, Google, Microsoft. Linkedin, SignUP Policies, SignIN Policies, Email SignUp, SignUpSignIN PolicyID, Configuring Application with Azure Application ID,Modern Applications, Requirements for Modern Apps, API, Logic Applications, Mobile App, Web App, Function App, Go To Market, Microsoft Application Platform, App Service Plan, App Service Environment - Private Infrastructure, Why use App Service, App service Features & Capabilities, Azure App Service, Virtual Machine, Service Fabric & Cloud Services Comparison, Creating a Mobile App, Swagger UI, API Apps, API management, API APPS & API Management, Implementing API APP via Visual Studio,

Stateless Auth using OAUTH2 & JWTMobiliya

Microsoft Graph API Webinar Application PermissionsStefan Weber

OAuth in the WildVictor Rentea

Developing Apps with Azure ADSharePointRadi

OAuth with Salesforce - DemystifiedCalvin Noronha

Stateless Auth using OAuth2 & JWTGaurav Roy

The document discusses stateless authorization using OAuth2 and JSON Web Tokens (JWT). It begins with an introduction to authentication, authorization, and single sign-on (SSO). It then provides an in-depth explanation of OAuth2 actors, flows, and grant types. The Authorization Code Grant flow and Implicit Grant flow are explained in detail. Finally, it introduces JWT and why it is a suitable standard for representing OAuth2 access tokens since it meets the requirements and libraries are available.

Microsoft Graph API Delegated PermissionsStefan Weber

Microsoft identity manoj mittalManoj Mittal

This document discusses building an application using Microsoft Identity Platform (formerly known as Azure Active Directory): - Microsoft Identity Platform allows building applications with a single sign-on experience and securely accessing data from any API using tokens. - The document outlines how to authenticate users via the implicit flow in MSAL, get tokens to call web APIs, and best practices for handling permissions and consent in an incremental way. - It encourages developers to leverage the Office 365 developer program resources to build applications that integrate with Microsoft cloud services using single sign-on for a seamless user experience.

Dev Dives: Master advanced authentication and performance in Productivity Act...UiPathCommunity

Are you using Microsoft 365 or Google Workspace? Are you curious to learn advanced authentication setups and batching capabilities? This webinar is for you. Discover how to: - Understand which Authentication type (Delegated/Application) best fits your requirements. - Explore the advantages of the new Google Workspace scope. - Differentiate between Integration Service Connection and the new Google Workspace scope. - Learn the process of configuring Microsoft 365 Scope using the Asset Method. - Determine the necessary Scopes for your automation needs. ️🗣️ Speakers: Alexandru Crijman, Product Manager, UiPath Nisarg Kadam, UiPath MVP 2024 & AI Ambassador, UiPath 📩 Useful resources: JSON format for Asset Creation: https://docs.uipath.com/activities/other/latest/productivity/how-to-use-microsoft-activities-integration-service#microsoft-office-365-scope-asset How to create Azure App with Restricted SharePoint Site Access: https://view.highspot.com/viewer/6605801c6ff9043b514449e3 ⏩ Register for our upcoming Dev Dives April session: Streamline document processing with UiPath Studio Web EMEA&APJ: https://bit.ly/Dev_Dives_April_EMEA_APJ AMER: https://bit.ly/Dev_Dives_April_AMER This session was streamed live on March 28, 2024. Check out all our upcoming Dev Dives 2024 sessions at: 🚩https://bit.ly/Dev_Dives_2024

OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...Brian Campbell

This document provides an overview of OAuth 2.0 and how it can be used to securely authorize access to APIs from mobile applications. It begins with an introduction to OAuth and discusses how it addresses issues with directly sharing passwords between applications. The document then outlines the basic OAuth flow, including key concepts like access tokens, authorization codes, and refresh tokens. It provides code snippets demonstrating an example OAuth flow for both Android and iOS, showing the HTTP requests and responses at each step.

Oauth Nightmares Abstract OAuth Nightmares Nino Ho

https://www.hackmiami.com/hmc5-speakers-day-2 OAuth is one of the most popular authorization frameworks in use today. All major platforms such as Google, Facebook, Box etc support it and you are probably thinking of implementi ng OAuth for your product/platform.We are not debating the popularity of the protocol or the limitations that come with it. We are here to help you implement it securely. When you use OAuth, there are three pieces - The Platform , the Application (using the platform) and the User (of the application). We will go over the common flaws we have seen in applications built on a OAuth platform which can lead to complete account takeover, how they can be a security engineer's nightmare, and how to fix them. We will go over security controls that the platform can put in place to help mitigate security vulnerabilities. We will also cover how bad design decisions, if chained with otherwise lower risk vulnerabilities can result in gaping holes in your OAuth implementation. You will leave this session with a deep understanding of how OAuth implementation should be secured both for a platform and in an application and things to test for during a security evaluation of OAuth implementations.

Implementing Microservices Security Patterns & Protocols with SpringVMware Tanzu

Deep Dive into OAuth for Connected AppsSalesforce Developers

The document discusses OAuth and its implementation for connected apps. It describes OAuth as a delegation protocol for conveying authorization across web apps and APIs. It then outlines the web server flow and user agent flow, including the different token types used. It demonstrates getting an access token via the web server flow and using it to query data. Finally, it provides information on refreshing access tokens before expired.

O auth2.0 20141003Syed Ali Raza

OAuth 2.0 is a framework that allows third-party applications to access private resources from an HTTP service, such as photos, videos, contacts, or calendar entries, without requiring end users to share their passwords. It provides authorization flows for web, desktop, mobile and native applications to obtain limited access to these resources without exposing the user's login credentials. This allows individual users to control which third-party applications they trust to access their private data and revoke consent at any time.

Iam f42 aSelectedPresentations

OAuth 2.0 is an open standard for authorization that enables apps to securely access APIs on behalf of users. It has become widely adopted for consumer apps but presents challenges for enterprise use cases. The presentation discusses adapting OAuth 2.0 for enterprises by supporting administrative authorization, mobile SSO federation, and server-to-server flows that exchange credentials or assertions for API tokens to enable API federation and password-less access across clouds. Future directions include further standardizing assertion flows and mobile app federation.

Premier Webcast - Identity Management with Windows Azure ADuberbaum

The document provides an overview of Azure Active Directory and identity management in the cloud. It begins with an agenda for the webcast and discusses how identity has changed as applications have moved to the cloud. It then covers key Azure Active Directory features like single sign-on, multi-factor authentication, access management, and its platform for developers. The document demonstrates how Azure Active Directory can provide identity services for cloud, mobile, and on-premises applications and connects directories.

Hitchhiker's Guide to Azure AD - SPS St Louis 2018Max Fritz

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It provides identity management capabilities for cloud, mobile, and on-premises applications. Azure AD uses the same Active Directory that many organizations already have on-premises but extends it to cloud services. It allows single sign-on for access to Office 365, Azure, and thousands of SaaS applications. Azure AD Premium provides additional advanced capabilities for security, access management, application management, and identity protection.

Introduction to Azure Web ApplicationsJoAnna Cheshire

Introduction to azure web applications for office and share point developersJoAnna Cheshire

Azure from scratch part 2 By Girish KalamatiGirish Kalamati

Stateless Auth using OAUTH2 & JWTMobiliya

Microsoft Graph API Webinar Application PermissionsStefan Weber

OAuth in the WildVictor Rentea

Developing Apps with Azure ADSharePointRadi

OAuth with Salesforce - DemystifiedCalvin Noronha

Stateless Auth using OAuth2 & JWTGaurav Roy

Microsoft Graph API Delegated PermissionsStefan Weber

Microsoft identity manoj mittalManoj Mittal

Dev Dives: Master advanced authentication and performance in Productivity Act...UiPathCommunity

OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...Brian Campbell

Oauth Nightmares Abstract OAuth Nightmares Nino Ho

Implementing Microservices Security Patterns & Protocols with SpringVMware Tanzu

Deep Dive into OAuth for Connected AppsSalesforce Developers

O auth2.0 20141003Syed Ali Raza

Iam f42 aSelectedPresentations

Premier Webcast - Identity Management with Windows Azure ADuberbaum

Hitchhiker's Guide to Azure AD - SPS St Louis 2018Max Fritz

More from NCCOMMS (20)

O365Con19 - UI:UX 101 Learn How to Design Custom Experiences for SharePoint -...NCCOMMS

The document provides an overview of a presentation on UI/UX design for SharePoint. It includes sections on understanding design principles, the pillars of design including wireframes, visual design and development phases, and examples of SharePoint design assets. The presentation encourages attendees that they can customize and extend SharePoint experiences through various approaches like theming, lists/libraries, Microsoft forms, hub sites, and using tools like PowerApps, Flow and PnP.

O365Con19 - Model-driven Apps or Canvas Apps? - Rick BakkerNCCOMMS

This presentation discusses the different types of PowerApps, including canvas apps, model-driven apps, and embedded canvas apps. It introduces the new PowerApps licensing model and provides demonstrations of creating apps and implementing security. The presentation also demonstrates a sample business solution using different app types for roles like sales, senior sales, and warehouse employees. Key takeaways include using environments and solutions to manage apps across multiple environments and leveraging embedded canvas apps for custom forms.

O365Con19 - Office 365 Groups Surviving the Real World - Jasper OosterveldNCCOMMS

This document discusses Office 365 Groups and governance strategies for managing collaboration in Microsoft Teams and Office 365. It provides an overview of Groups and how they integrate with Office 365 services. It also covers best practices for establishing governance policies for naming conventions, expiration rules, deletion processes, and access controls. The document advocates adopting a multi-step governance approach including workshops, planning, and establishing an oversight committee to implement and monitor the governance framework.

O365Con19 - Developing Timerjob and Eventhandler Equivalents - Adis JugoNCCOMMS

This document discusses developing daemon equivalents like timer jobs and event handlers for SharePoint Online using Azure services. It describes options like Azure Functions, WebJobs, and Logic Apps and how they can be used with Azure Active Directory authentication. It provides demos of creating a timer job with an Azure Function using a certificate for app-only authentication and elevated permissions, and creating a webhook event handler with Functions and authentication. The document recommends Functions and WebJobs for timer jobs and either delegated or app-only authentication for event handlers depending on permission needs.

O365Con19 - Sharepoint with (Artificial) Intelligence - Adis JugoNCCOMMS

This document discusses using artificial intelligence and Azure Cognitive Services with SharePoint. It provides an overview of Azure Cognitive Services capabilities like language detection, sentiment analysis, and image recognition. It then demonstrates how these cognitive services can be used with SharePoint through Power Apps, Microsoft Flow, and the SharePoint Framework to automatically tag and extract metadata from images and text. Examples shown include using cognitive services for image and text analysis, translation, and extracting metadata through Power Apps and updating through Flow.

O365Con19 - What Do You Mean 90 days Isn't Enough - Paul HuntNCCOMMS

The document discusses auditing logs in Microsoft 365 and Azure environments. It notes that out of the box, Office 365 only retains audit logs for 90 days, which may not be enough for security investigations. It outlines some options for extending log retention and access, including using the Management Activity API directly, integrating with Azure Log Analytics and Azure Sentinel, or using third-party solutions. All options come with different configuration efforts, costs, and retention periods that must be considered based on an organization's auditing needs. Extending retention beyond 90 days requires configuring additional solutions.

O365Con19 - Tips and Tricks for Complex Migrations to SharePoint Online - And...NCCOMMS

This document provides tips and guidance for large-scale migrations to SharePoint Online. It discusses typical challenges like dealing with terabytes of unstructured "dark data" and the need to rationalize and classify data. The document recommends engaging stakeholders and designing a future-proof target architecture. It also demonstrates migration tools and techniques like using pipelines to automate and optimize the migration process. The key takeaway is that large-scale migrations require optimizing processes through automation since common tasks become time-consuming at large volumes of data.

O365Con19 - Start Developing Teams Tabs and SharePoint Webparts with SPFX - O...NCCOMMS

This document discusses how to start developing Teams tabs and SharePoint webparts using the SharePoint Framework (SPFx). SPFx allows building custom user interface elements using open-source tools like React. It covers how to get a developer tenant, set up the development environment, build a basic webpart, and leverage the Microsoft Graph API from within SPFx. The presentation includes demos of a webpart in Teams and SharePoint, using the Graph API to access OneNote notebooks, and best practices for SPFx development.

O365Con19 - Start Your Journey from Skype for Business to Teams - Sasja Beere...NCCOMMS

The document discusses upgrading from Skype for Business to Microsoft Teams. It provides an overview of Teams and how it brings together chat, meetings, calling, collaboration and file storage. It then outlines a framework for planning and implementing the upgrade, including preparing the IT environment and users, implementing in pilot and production phases, and ongoing adoption and optimization. It describes different "coexistence modes" to define how Skype for Business and Teams can be used together during the transition.

O365Con19 - Lets Get Started with Azure Container Instances - Jussi RoineNCCOMMS

Getting started with Azure Container Instances Azure Container Instances (ACI) allows you to run containers in Azure without having to manage virtual machines. ACI provides Linux containers with configurable RAM and CPU. You can store container images in Azure Container Registry (ACR) and deploy them to ACI. ACI offers pay-per-second billing. Key steps to get started include provisioning ACR to store images, provisioning ACI to run containers from ACR images, and using Azure CLI scripts to automate deployments. It is recommended to test containers locally before deploying to ACI.

O365Con19 - Azure Blackbelt - Jussi RoineNCCOMMS

This document provides an overview of 30 essential skills to master Azure. It discusses key concepts like Azure Active Directory, subscriptions and tenants, identity management and security. It also covers specific Azure services like Azure Functions, Logic Apps, Storage, SQL, Cosmos DB, Virtual Machines, and containers. Other sections discuss API Management, monitoring with Log Analytics and App Insights, DevOps, cost management, and governance tools like Azure Policy and Blueprints. The document emphasizes understanding Azure Active Directory, focusing on 5-10 key services, embracing new features through previews, and adapting strategies based on customer needs between cloud and on-premises.

O365Con19 - Customise the UI in Modern SharePoint Workspaces - Corinna LinsNCCOMMS

This document discusses ways to customize the user interface in modern SharePoint sites. It explains that themes, site designs, hub sites, and formatting tools can be used to control aspects of the look and functionality. Various Microsoft tools and services are also presented to facilitate UI customization, including the SharePoint Design website, Provisioning Service, and Modernization Scanner. The recap emphasizes using themes, designs, and hub sites for branding and consistency across related sites while extending customizations through SharePoint Framework solutions.

O365Con19 - Be The Protagonist of Your Modern Workplace - Corinna LinsNCCOMMS

The document provides guidance on adopting a modern workplace. It emphasizes defining business scenarios to prioritize how the new tools will be used. Stakeholders like executive sponsors and champions are key to driving adoption. Sponsors must actively support the project while champions help scale adoption across the organization. Training and monitoring help ensure users understand the tools. Defining success criteria for scenarios helps measure the impact of the new workplace.

O365Con19 - How to Really Manage all your Tasks Across Microsoft 365 - Luise ...NCCOMMS

This document discusses how to manage tasks across Microsoft 365 applications. It recommends using Microsoft To-Do to track personal tasks across devices and keep track of tasks from emails, documents and OneNote. For project tasks, it recommends using Microsoft Planner and Outlook within Office 365 groups to collaborate with others. It provides demos of setting up tasks in To-Do and Planner, connecting documents to tasks using Flow, and achieving inbox zero to gain visibility of all tasks in one place through To-Do. The overall message is that Microsoft To-Do can be used to create and review all tasks from different sources to achieve a comprehensive overview.

O365Con19 - Sharing Code Efficiently in your Organisation - Elio StruyfNCCOMMS

This document discusses efficient code sharing in organizations using private npm packages and Azure Artifacts. It describes creating a private npm feed in Azure Artifacts to host internal packages. This allows teams to publish packages for use by other projects while avoiding issues of public registries. The document demonstrates configuring a pipeline in Azure DevOps to build, release and install packages from the private feed.

O365Con19 - Things I've Learned While Building a Product on SharePoint Modern...NCCOMMS

This document provides an overview of lessons learned from building products on SharePoint Modern. It discusses SharePoint Framework architecture, localization strategies, versioning approaches, challenges of supporting older browsers and environments, and the importance of testing. Key recommendations include using semantic versioning, sharing common code via libraries, automating releases through CI/CD, and testing across different environments.

O365Con19 - Keep Control of Your Data with AIP and CA - Bram de JagerNCCOMMS

This document discusses Microsoft Information Protection and its capabilities. It begins with an overview of information protection basics and challenges organizations face with sensitive data. It then demonstrates Microsoft's unified approach to discovering, classifying, labeling, and protecting data across devices, apps, cloud services and on-premises. The presentation includes a demo of sensitivity labeling and conditional access capabilities. It concludes with a discussion of upcoming features and considerations for implementation.

O365Con19 - Kaizala a Dive Into the Unknown - Rick van RousseltNCCOMMS

Marathi is the native language of 70 million people in India and is spoken as a second language by 20 million more. The Kaizala app allows users to communicate across Android, iOS, and Windows devices and stores user data securely on Microsoft servers according to their standards. The web version of Kaizala allows messaging and file sharing from a computer browser while connected to a user's mobile account through a verification code. Administrators can manage users and view reports through the Office 365 admin center.

O365Con19 - How to Inspire Users to Unstick from Email - Luise FreeseNCCOMMS

The document discusses how email is overused as a tool for tasks like task management, document management, and discussions within teams, which causes issues like lack of transparency, versioning problems, and email overload. It introduces modern workplace tools like Microsoft Planner, SharePoint, and Teams that can replace email for those functions and provide benefits like improved collaboration, file sharing and version control. The document provides tips on using Planner and Teams to manage tasks and documents and have discussions to help inspire users to move away from relying solely on email.

O365Con19 - O365 Identity Management and The Golden Config - Chris GoosenNCCOMMS

This document discusses Microsoft's "Golden Config" approach to securing identities in Office 365 and Azure Active Directory (Azure AD). It provides an overview of Azure AD identity types, explains why additional security is needed beyond passwords alone given growing cybersecurity threats, and outlines the five steps and various policies that make up the Golden Config's recommended practices for strengthening credentials, reducing attack surfaces, automating threat response, increasing security awareness, and enabling complete end-user security. These include enforcing multi-factor authentication, managing privileged access, monitoring sign-ins and risks, and carefully planning deployments.