SharePoint 2013 development--provider-hosted App prep work

Last Update:2015-06-18 Source: Internet

Author: User

Tags pfx file

Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞

??Blog Address: http://blog.csdn.net/FoxDaveFollow-up content let's develop a SharePoint porvider-hosted APP one step at A-this article focuses on some of the preparatory Work.SharePoint requires a series of steps to include a certificate and create a unique client ID to use a server-to-server (STS) communication Protocol. Apps that use the STS communication protocol are called High-trust applications because the app allows the User's access token (access token) to impersonate the User's Identity. STS protocol is a general-purpose communication protocol, which requires temporary access token to be accessed and widely used by Microsoft applications, such as Exchange,lync. The SharePoint provider-hosted app created by the local server does not use context tokens to identify users like the cloud, and a high-trust application is not a fully trusted application, and it must request the user who installs it to obtain Permissions.Let's take a look at how to do it:1. Create a Certificate.On the SharePoint server, open IIS manager, Select the server node, and double-click the server Certificate.Click Create Self-signed certificate in the menu on the Right.Take a friendly name for the certificate, we call Hightrusttest Here.Click OK to see the certificate we created, right click on the certificate to select export, usually we export to the Visual Studio project folder directory, here has not been created, first exported to the desktop, password random one, we abc123 here.The certificate is put here first and will be used Later. 2. Create a corresponding. cer file.In the server certificate view, Double-click the certificate that we created earlier to display the certificate details and select the Details tab.Click the Copy to file button, Select next, Default value next, Repeat defaults next, in the filename here, we make hightrusttestcert, next, click Finish to complete the Export.Note: The. PFX file must be in the same machine as visual studio, the. cer file must be on the same machine as SharePoint 2013. PFX files must be deployed to the Web server where your Web application Resides. 3. Configure the services on SharePoint 2013 for use by the STS application, ensuring that the application Management service and the user Profile application are Configured.Management Services application, Management center, application management, Ensure that user profile applications and application management services are Started. Services on the server, application management, Central administration, ensure that the user Profile service is Started. 4. Configure SharePoint 2013 to use certificates and configure trust for your applicationA. In a text editor or Windows PowerShell editor, start a new file and add the following line to it to create the certificate object$publicCertPath = "C:\HighTrustTestCert.cer"$certificate = New-object System.Security.Cryptography.X509Certificates.X509Certificate2 ($publicCertPath) B. Add the following line to ensure that SharePoint treats the certificate as a root certification authorityNew-sptrustedrootauthority-name "hightrusttestcert"-certificate $certificate C. Add the following line to get the ID of the authorization realm$realm = Get-Spauthenticationrealm D. Your remote WEB application will use an access token to gain access to SharePoint Data. The access token must be issued by a token issuer who is trusted by SharePoint. In a high-trust SharePoint-related application, the certificate is the token issuer. Add the following line to construct the issuer ID in the format that SharePoint requires:[email protected]_guid. (id can be generated with visual Studio's own GUID creation tool, Note to Lowercase)$specificIssuerId = "ed5182f0-3090-4e83-a58b-9eb145619993"$fullIssuerIdentifier = $specificIssuerId + ' @ ' + $realm E. Add the following line to register the certificate as a trusted token issuer. the -name parameter must be unique so that in a production configuration, you can usually use a GUID as part (or All) of the name, but in this context you can use a friendly Name. You need the –istrustbroker switch to ensure that you can use the same certificate for all High-trust applications that you develop. To register the token issuer now, you need to iisreset the Command. Without this command, you may have to wait 24 hours to register a new issuer.New-sptrustedsecuritytokenissuer-name "high Trust Test Cert"-certificate $certificate-registeredissuername $ Fullissueridentifier-istrustbrokerIISReset F. SharePoint 2013 typically does not accept self-signed certificates. therefore, When you use a self-signed certificate for debugging, add the following line to turn off the general requirements for SharePoint for HTTPS when a remote WEB application calls to Sharepoint. If it is not added, you will receive a "403 (forbidden)" message when the remote WEB application calls SharePoint using a self-signed Certificate. You will undo this step in the process that follows. Shutting down the HTTPS requirement means that the request from the remote WEB application to SharePoint is not encrypted, but the certificate can still be used as the trusted issuer of the access token, which is its primary purpose in High-trust sharepoint-related applications.$serviceConfig = Get-spsecuritytokenserviceconfig$serviceConfig. allowoauthoverhttp = $true$serviceConfig. Update () G. Save the file by using the name Hightrustconfig-fordebugonly.ps1 H. Open the SharePoint Management Shell as an administrator, and then run the file using the following line. / Hightrustconfig-FORDEBUGONLY.PS1 Next we will use Visual Studio to develop and deploy the provider-hosted app.??SharePoint 2013 development--provider-hosted App prep work

This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

Sales Support

1 on 1 presale consultation

Chat Contact Sales
After-Sales Support

24/7 Technical Support 6 Free Tickets per Quarter Faster Response

Open a Ticket
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

Learn More