Agenda

App running in Outlook Write once, run everywhere Apps run on Outlook, Outlook Web App, and Mobile Outlook Web App. Standards based development Developed using common web technologies such as CSS, HTML5, and JavaScript. Secure Apps are designed with a three-tier permission model and run in an isolated, sandboxed process.

Rule-based activation Rules are defined in the manifest Rules are applied to the selected item App is activated if conditions in the rules are met Rules Combine multiple rules for complex activation requirements Apply logical operators like AND or OR Define rules using regular expressions Rules can access known entities such as phone numbers

ItemIs A rule that checks if the item is a specified type (appointment or message) Example: ItemHasKnownEntity A rule to check if the item has a specific type of known entity Example: <Rule xsi:type=“ItemHasKnownEntity” EntityType=“Address” ItemHasRegularExpressionMatch Defines a rule using a custom RegEx to match the contents of an item RuleCollection Defines a rule composed of multiple rules (combined using AND or OR)

Entity typeRecognition condition AddressUnited States street addresses 1 Microsoft Way, Redmond, WA AddressAny SMTP address MeetingSuggestionA reference to an event or meeting Let’s meet next Tuesday for lunch. ContactA personal name related to other entities Steve Ballmer, Microsoft, 1 Microsoft Way, Redmond, WA PhoneNumberUnited States telephone numbers (507) TaskSuggestionActionable sentences in an Please install Office 15 on my computer. UrlA file name or web address

demo

Access to item properties Recipients Properties such as subject and date sent Meeting details such as start and end time, location User profile info Name, address, and time zone Regex matches and known entities Use for activation rules and within App Limited Exchange Web Services access Look up items in mailbox Create appointments, messages, tasks and contacts Send messages/meeting invites Token for Single Sign-on Office.contextsettingsapplicationoutlookAppOmuserProfileNameTime zone AddressItemMessagePropertiesEntitiesRegEx matches Custom properties AppointmentPropertiesEntitiesRegEx matches Custom properties Display formsUser tokenEWS calls

Agenda

Four Stakeholders of Security and Privacy A three-tier permissions model provides the basis for privacy and security

Security and Governance Considerations Request appropriate capabilities Request using the RequestedCapabilities element in the manifest Apps requesting ReadWrit box can only be installed by admins ReadItem is needed to write custom properties Restricted has limited JSOM access and cannot use custom RegEx Be mindful of performance Outlook desktop client enforces resource usage limits Thresholds may be adjusted by administrators Regex evaluation, CPU usage, memory usage and stability

demo

Agenda

thank you