Planning the Infrastructure Required for the new App Model in SharePoint 2013

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Lam — Thu, 16 May 2013 00:15:55 GMT

I have the same questions as MarcoR. Everything works inside the firewall, but really confuse about how to publish this through TMG 2010. Looks like the redirect.aspx is having a problem through TMG. Not sure how I can route a *.contosoapps.com to the internal SP server.

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Aaron — Thu, 11 Apr 2013 22:01:44 GMT

Great article Steve. I'm wondering if the March update changes any of your guidance. Thanks!

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Christopher Buchholz — Wed, 27 Feb 2013 17:23:15 GMT

So for the DNS entry for *.contosoapps.com, you do NOT create a forward lookup zone and CNAME entry rerouting to contoso.com, as Microsoft instructs us to here? technet.microsoft.com/.../fp161236.aspx

That is the only thing left I can think of to explain why my apps aren't working (they were working before I changed the IP to add the *.constosapps.com cert, I just got a cert error which was fine)

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Olonga, Henry — Fri, 08 Feb 2013 16:01:35 GMT

I think the login prompts are coming from the listener web application which has to be Windows Authenticated web app which picks of any requests for the apps at first. Not sure how to get around this.

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Luna — Thu, 10 Jan 2013 18:53:08 GMT

I have the same issue as above. I am prompted for a password for each app

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Olonga Henry — Tue, 08 Jan 2013 17:05:08 GMT

Hi Steve,

Great Article. Everything is working in the intranet. However, our web app is accessible from the internet and when I try to access a SharePoint page that has two apps installed, SharePoint prompts me twice to login to each of those apps. In the intranet, I have added the app domain (https://*.myappdomain.com) to local trusted zone so I don't get any prompts. However, accessing from the internet, it is not going to work and as each app has a totally different url, I am going to be prompted each time. This is a big issue as far as I am concerned. Once I am authenticated to the SharePoint site, why is SharePoint not trusting those apps and not automatically authenticating them?

Thanks.

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Somil Prakash — Sat, 05 Jan 2013 00:00:02 GMT

Hi Steve,

In this article you have mentioned "sharePoint Apps do not work on web applications that use SAML".

You have mentioned the issue would be resolved by some service pack that will be applied to SP2013 RTM.

You also published another blog "Using SharePoint Apps with SAML and FBA Sites in SharePoint 2013" , where you advocated about SAML based authentication for provider hosted APP (S2S). You covered that SharePoint application and .Net Web application( remote web) to have claims based authentication in order to attain the functionality.

Please clarify whether apps for Sharepoint would work on Sharepoint site that has Claim based authentication using ADFS 2.0?

I could not understand the line "SharePoint Apps do not work on web application that uses SAML", Please clarify...

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Steve Peschka — Sat, 17 Nov 2012 01:25:15 GMT

Stay tuned Nik; I'm just starting to talk to one of our writers about putting together an article on OAuth and High Trust Apps. We hope to flesh it out over the next few weeks and if we get lucky, maybe publish something before the end of the year.

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

Nik Patel — Tue, 18 Sep 2012 22:33:37 GMT

I would love to read more about The security model as well.. I would like to hear your view on OAuth model or High Trust model for cloud hosted apps...

re: Planning the Infrastructure Required for the new App Model in SharePoint 2013

MarcoR — Thu, 06 Sep 2012 09:53:27 GMT

Awesome article Steve... but I'm a bit confused now :)

What about publishing the apps to internet with any publishing rules?

If you have to publish the web application intranet.contoso.com to internet using url intranet.coolsite.com and this web application uses the apps model (assuming the apps are configured with *.contosoapps.com), could I publish the apps to internet with the url *.apps.coolsite.com ?

Cheers