3. Agenda

6. App running in Outlook Write once, run everywhere Apps run on Outlook, Outlook Web App, and Mobile Outlook Web App. Standards based development Developed using common web technologies such as CSS, HTML5, and JavaScript. Secure Apps are designed with a three-tier permission model and run in an isolated, sandboxed process.

10. Rule-based activation Rules are defined in the manifest Rules are applied to the selected item App is activated if conditions in the rules are met Rules Combine multiple rules for complex activation requirements Apply logical operators like AND or OR Define rules using regular expressions Rules can access known entities such as phone numbers

11. ItemIs A rule that checks if the item is a specified type (appointment or message) Example: ItemHasKnownEntity A rule to check if the item has a specific type of known entity Example: <Rule xsi:type=“ItemHasKnownEntity” EntityType=“Address” ItemHasRegularExpressionMatch Defines a rule using a custom RegEx to match the contents of an item RuleCollection Defines a rule composed of multiple rules (combined using AND or OR)

12. Entity typeRecognition condition AddressUnited States street addresses 1 Microsoft Way, Redmond, WA 07722 EmailAddressAny SMTP email address MeetingSuggestionA reference to an event or meeting Let’s meet next Tuesday for lunch. ContactA personal name related to other entities Steve Ballmer, Microsoft, 1 Microsoft Way, Redmond, WA 07722 PhoneNumberUnited States telephone numbers (507) 555-1212 TaskSuggestionActionable sentences in an email Please install Office 15 on my computer. UrlA file name or web address

13. demo

16. Access to item properties Recipients Properties such as subject and date sent Meeting details such as start and end time, location User profile info Name, email address, and time zone Regex matches and known entities Use for activation rules and within App Limited Exchange Web Services access Look up items in mailbox Create appointments, messages, tasks and contacts Send messages/meeting invites Token for Single Sign-on Office.contextsettingsapplicationoutlookAppOmuserProfileNameTime zoneEmail AddressItemMessagePropertiesEntitiesRegEx matches Custom properties AppointmentPropertiesEntitiesRegEx matches Custom properties Display formsUser tokenEWS calls

17. Agenda

19. Four Stakeholders of Security and Privacy A three-tier permissions model provides the basis for privacy and security

20. Security and Governance Considerations Request appropriate capabilities Request using the RequestedCapabilities element in the manifest Apps requesting ReadWriteMailbox can only be installed by admins ReadItem is needed to write custom properties Restricted has limited JSOM access and cannot use custom RegEx Be mindful of performance Outlook desktop client enforces resource usage limits Thresholds may be adjusted by administrators Regex evaluation, CPU usage, memory usage and stability

21. demo

22. Agenda

24. thank you