Office 365 API Tools
Simon Just Kjeldgaard Pedersen @ Delegate A/S
@simped
http://wp.sjkp.dk
Agenda
- Intro to Office 365 API tools
- Intro to OAuth2
- Web Site example
What does Office 365 API Tools library offer?
- Easy way to use Office 365 APIs in 3rd party client applications (Web, Native or Mobile)
- Perform authentication and discovery
- Use the Mail, Calendar and Contacts API (Exchange)
- Use the My Files and Sites API (currently .NET only, with JavaScript coming soon) (SharePoint)
- Use the Users and Groups API (Active Directory)
- Use the CRM API (currently not officially supported, but it works)
- Everything you do with Office 365 API library, is done on behalf of the User (No service account magic, hence client applications)
- If you need to run as a service account, then use the SharePoint App model, with app authentication. For CRM your are afaik out of luck
Typical usage scenarios for Office 365 API tools
-
Websites hosted outside of Office 365 that wants to surface Office 365 user data
- Typically multitenant applications (although not a requirement)
- Applications for users that dislike SharePoint UI
- Standalone applications, e.g.
- Physical Print service
- Pdf service
- External file storage (import/export)
-
Everything mobile
-
Great support for Windows Phone (obviously)
- Cross platform support via. PhoneGap (new in VS2013 update 2, called native apps)
- Some support via Xamarin (haven’t tested it)
-
Native apps
- Windows Store
- Windows Forms or WPF
Office 365 API tools vs. SharePoint App model
| Office 365 API tools | SharePoint App model |
|
|
How to get it
- Update Visual Studio to Update 2
- Download extension: http://msdn.microsoft.com/en-us/library/office/dn605892(v=office.15).aspx
- CRM support is gone from the latest version (actually it was never there, but it was easy to add)
- See my github repository: https://github.com/sjkp/Office365APITools
What does the Extension add?
- A new context menu in Visual Studio for all supported project types: Right click project -> Add -> Connected Service
- Adds all required nuget packages to your project
- Adds sample code to your project
- Adds a Azure App to your Active Directory (and configures it)
- Adds (mostly) correct configuration parameters to your .config
- Provides easy to (re)use authentication classes
- Provides some simple base classes (they but suck for everything but the sample code)
Demo time
Use Office 365 API Tools to show Emails in Exchange
How does it work (Intro)?
- It uses OAuth2 to securily access the data in SharePoint on behalf of the user
- How much do you know about OAuth2?
- Authentication: Who are you?
- Authorization: What can you access?
How does it work (Component overview)
OAuth2 Flows Get Authorization Grant
| Authorization Code Flow (server side) | Implicit Flow (Client Side) |
|
|
Authorization Code Flow (Access OneDrive, No Multitenancy)
Authorization Code Flow (Access OneDrive, No Multitenancy)
Add multitenancy to the mix
- In previous slides the Azure AD App was installed by an Azure AD Admin, allowing all users in the organization to use it (effectively trusting that the app is harmless)
- If the Azure AD App is multitenant enabled, then it can be used by users outside the organization that created it
- The first time a user, uses a multitenant app, he has to give the consent that the app can access the protected ressource on his behalf (effectively he is trusting the app, technically the app is installed for that user in his Azure AD)
- An Azure AD App multitenant can also be installed for all users in an organization by an Azure AD Admin, removing the need for every single user to accept it
Demo
Access files in OneDrive/CRM
Managing Azure AD Apps
- Administrators should check this:
- Disable users ability to install apps (Don’t do that): http://blogs.msdn.com/b/exchangedev/archive/2014/06/05/managing-
- Get an overview of what apps users have installed (Do that): http://appdiscovery.azure.com/
- End users go to for uninstall and to report problems:
Resources
- The announcment: http://blogs.office.com/2014/05/12/net-and-javascript-libraries-for-office-365-apis/
- VS Extention: http://visualstudiogallery.msdn.microsoft.com/7e947621-ef93-4de7-93d3-d796c43ba34f
- MSDN documentation: http://msdn.microsoft.com/en-us/library/office/dn605892(v=office.15).aspx
- Which Authentication library to choose: http://www.matvelloso.com/2014/06/05/authentication-library-choose/
- ADAL: http://channel9.msdn.com/Series/Windows-Azure-Mobile-Services/Azure-Mobile-Services-AAD-O365-Authentication-identity-across-services
Office 365 API Tools
By Simon J.K. Pedersen
