I haven’t found a full tutorial for designers yet but there are some good blog posts out there to illustrate how Design Manager works for designers.

Begin with this one

http://bniaulin.wordpress.com/2012/07/18/sharepoint-2013-design-manager-convert-html-to-master-page/

More details here

http://www.learningsharepoint.com/2013/03/25/add-an-html-master-page-to-sharepoint-2013-using-design-manager/

More tutorials

http://www.learningsharepoint.com/2013/03/25/sharepoint-2013-design-manager-tutorials/

However if you are using IE, you get a nasty reply that looks like below screenshot

Basically IE comes with a feed reader that doesn’t render the REST feed properly. You can turn off this reader by going to Internet Options –> Content then click on Settings under Feeds and Web Slices section. Make sure Turn on feed reading view is unchecked

Then restart IE and see your REST call renders nicely on IE

New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

However when I click on Configure Apps URLs on Central Administration site, I got a “the subscription settings service and corresponding application… ” error message and cannot proceed. It turns out I also need to create a Subscription Service Application shown in the post below

http://blogs.technet.com/b/speschka/archive/2012/07/23/setting-up-the-subscription-settings-service-application-in-sharepoint-2013.aspx

I got the guide from this French blog and got Google to translate for me. Certain parts are not clear [due to mistake in translation] so I repost it here

Create a new App Pool that share the same User Credential with the SharePoint site.

Copy the content of your ASP.NET 4.0 web app into a folder under the SharePoint site. In my case it will be C:\inetpub\wwwroot\wss\VirtualDirectories\8080\

Inside IIS Manager convert this folder into a web application.

Go inside C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG and open the Web.config (.NET version here maybe different)

Before anything else right after the <?xml> opening node add the following (in case you dont have configSections defined already, else append to it)

<configSections>
    <sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35">
      <sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral,
PublicKeyToken=31bf3856ad364e35">
        <section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35" requirePermission="false" allowDefinition="MachineToApplication" />
        <sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35">
          <section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35" requirePermission="false" allowDefinition="Everywhere" />
          <section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35" requirePermission="false" allowDefinition="MachineToApplication" />
          <section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0,
Culture=neutral, PublicKeyToken=31bf3856ad364e35" requirePermission="false" allowDefinition="MachineToApplication" />
        </sectionGroup>
      </sectionGroup>
    </sectionGroup>
  </configSections>

After that go to the web.config of the SharePoint site, comment out the exactly same whole secion of <sectionGroup name=”system.web.extensions”> that you
pasted just now. Leave the other sections group untouched

Surround the following nodes with this

<location path="." inheritInChildApplications="false"></location>

<microsoft.sharepoint.client>
<SharePoint>
<system.web>

This will let the child web app to use it’s own settings

Go to the child web app, change the following

<modules runAllManagedModulesForAllRequests="true"/>

TO

 <modules runAllManagedModulesForAllRequests="true">
      <remove name= "SPRequestModule"/>
      <remove name= "PublishingHttpModule"/>
      <remove name= "RSRedirectModule"/>
      <remove name= "StateServiceModule"/>
      <remove name = "SharePoint14Module"/>
      <add name= "Session" type="System.Web.SessionState.SessionStateModule" />
    </modules>

This will disable all SharePoint modules in the child web app and enable back session

After that do IISRest and everything should be working. But if you got error 500 or a blank page please refer to this page on how to debug

Office Services

Both lab and my own built VM cannot start Microsoft .NET Framework 4.0 NGEN v4.0.XXXX services but the SP startup scripts will try to start this

Excel Services

Now you have Excel Form
Excel everywhere (its like OLE but works on web page)
Javascript API on your Excel sheets!!

Word Automation Services

CSOM access to Word Automation Services
Can convert to other format PDF and XPS
Still no access to protected Word files
Still does not run on hosted model (Only as Farm solution)

PowerPoint Automation Services (New)

Same model as Word
Source from PPT and PPTX
Convert to PPTX, PDF, XPS, JPG, PNG

Deck of multiple slides when converted to JPG and PNG will be separate files

Translation Services
Cloud based solution using Bing
Also based on WAS programming model
Can translate sites and documents

Note: No extensibility point to use other translation engine

At the moment its cost free for Bing translation but Product Manager to confirm later

Social

Skydrive Pro is a new name of SharePoint Workspaces
Community is a new feature in SP2013

MySite broken into Newsfeed, Sites and SkyDrive
One can do microblogging now

My Task gives you unified view of task from various SP sites and Exchange

But SP and Exchange still have their own task silo
So the Windows Phone still don’t automatically shows alert on SP tasks

The Social services make heavy use of App Fabric Cache
Work Management Service Application will goes around pull task

Yammer the cloud enterprise social site, acquired by Microsoft
SP2013 does not have integration with Yammer yet
Yammer does have web part for SP2010
Yammer has a rich set of JS API, there are demos later on how to integrate SP2013 Communities with Yammer Groups
However Yammer may remain a on the cloud service

Still there is no Pool and Quiz web part

Community is a new Site Template

Badges and reputations exist in Communities

Social and gamification works like ring fence certain pieces of information and apply. It is not site wide.

For lab file use MsOnlineClaimsHelper for O365 ??

For Social, things like profanities filtering and site wide point system are TBD

Mobile

Now can stored geo code info in a new Location Field, but this has to be done via custom scenario with coding
Actually its more about Windows Phone/ Windows 8 at the lab
Think of Windows Azure Mobile Service

Supports FBA, O365, Basic authentication
Cross firewall to be done via UAG or Alternative Access Mapping

Will Reporting Service 2012 supports FBA? I think only supports claim based but not FBA

For the lab VS2012 does not allow Mobile Dev in Windows Server

Push Notification can register Windows Phone but cross fingers for Windows 8 also

To activate go to Site Features –> Push Notifications Support & Push Notifications

Uses Bing Map in the phone

Napa Office 365 Development Tool

Available on Office 365 Preview
Runs only in Developer Site Collection

www.napacloudapp.com

Still in Beta, if you click Create and nothing happens go out and do again

Semi Intellisense is here, for HTML and Javascript
Error highlighting is here already
Documentation is available
There is hover over explanation
Debugging not there yet, but its a planned feature
Napa projects can be opened in Visual Studio without download locally
From VS, source code available for TFS Preview on the cloud

Supports IE 9 above but also will work on other browsers. I assume its HTML5 based

Theme Design

How easy to change the SharePoint theme?
You can drag wallpaper onto the site
Change the colour scheme and font
So we need to find out more
1. Can we add new Site Layout and Font?
2. How to change to more complex theme?

Apps for Office

Build on Web Extensibility Framework, allows HTML and JS developers to build Office plugin
Ends up one can target Office Web Apps as well
On desktop mode, it allows Office to host the web page code via the IE Trident engine and let the code access the document
Less feature than VSTO i.e. you can’t play with the chrome
Some Javascript functionalities are turned off, i.e. alerts can’t run

Can run on Office store and also on private folder share
This is known as Agave in beta

No drag and drop eventing for now

The HTML app is actually a remote web app as its a ASP.NET website
You can’t do cross domain call… unless via json proxy

Manifest file loaded into registry
CurrentUser -> Microsoft -> office -> 15 -> Wef

People now install apps now based on reviews… people used to choose based on system requirements

Can be install via Exchange App Catalog but its more of a push model, Admin install Exchange App and its visible to users

Do we have a offline mode?

Admin can disable Office Store with GPO

Check out telemetry services for Office
You can find out the type of Office and Office Apps in the enterprise

SharePoint can be an App Catalog

When an app is added to a document, the bread crumb will change and become a GUID

Does not work for protected document at the moment

Business Connectivity Services

SharePoint Online now supports BCS

OData can be a Data Source to BCS

Used in SP Online as SP Online cannot use DLL

SQL Server Reporting Services can return OData result

*SharePoint Designer does not support OData datasource

There is a Northwind database exposed as OData on Azure marketplace so you can play around with it

http://services.odata.org/Northwind/Northwind.svc

External Content Type is Farm level in 2010, now is App level

We now have Event Receivers in BCS,

Example data changed in SQL Server data source, BCS will be notified. It will be captured by the event receiver

Have to investigate what are available in SP Foundation

User permission setting has to be done one by one even people picker allows you to choose more than one user

ECM

ECM improvement is around eDiscovery and Taxonomy

Goal to achieve to full DoD certification

eDiscovery improves upon Record Management in 2007/ 2010

eDiscovery mainly applies to companies with HQ or office in US

ECM big bet also include Exchange where mailbox can be a content source. Retention and compliance can be apply on mail

Acquire – Attain – Expose

Clearwell which is just acquired by Symantec [find out more]

Its about empowering legal teams

Centralize management can cover Lync, SharePoint and Exchange. Lync is here because achieving is sent to Exchange

Exchange and SharePoint to share the same search platform

There is a new Site Template called Discovery Set this is a case management site template

ECM comes to SharePoint Online

Also new in 2013 is the Site Mailbox container… email’s attachments are stored in SharePoint. For secured email [IRM'ed] and encrypted emails might not be supported. TBD

IRM’ed email has something to do with CSP…. and the key is tied to the workstation. How does SP access these?

One Note can comes in as Document Set. CSOM can access Document Set

Content Management Interoperability Services Connector comes OOB

In the lab, Ken Shansez does not exist, use Ken Ewerd instead

Limit of 30k terms in terms set and 1mil in total back in 2010

Search

FAST and SharePoint Search becomes a single extensible platform

It’s FAST Engine + SharePoint Crawler

The same Search platform works on Exchange

New search capabilities

• Topic Pages
• Content by Search
• My Task (Pro)

Plugins from customers and partners

Crawl is now separated from the Content Pipeline

Protocol handler replaces iFilter but certain protocol handler still maps back to existing iFilter

Index storage is now on DB, where FAST used to store in disk

On Search federation we have Federated Result Source

A lot of the architecture questions are answered in IT Pro sessions

FAST Query Language still supported

SQL Query has been removed

Keyword query is preferred

Queries can be REST based

Settings can be exported to different environment for Dev to Prod setup

Another new concept know as Search Vertical

No-code customisation

• Result Sources : Federated location. Can be Local and remote SP index (Can use SSO ID), OpenSearch [Bing], or Exchange [I wonder if Lucene is supported]. Site Collection admin can now change the scope in their own sites
• Query Rules : Allow customisation of returned results. You can affect rank as in FAST
• Result Types : How to display results. Replaces XSLT to render results
• SPNavigator : replace the tabs in Search Center of 2010

To disable search security trim, you just configure a result source acting as a different user credential

PDF support is now OOB

Some file type filters from FAST are not available in 2013…

How to do medical search result? in FAST you ca build alias and dictionary. Not seen in 2013

Web Content Management

No more variations… just channels

For multi lingual, you can use translation services or use XLIFF file format for manual translation

Navigation is now term store based… you have to reindex the site when you progress to a new level. Else you won’t need it on the page. However the 7 level limitation might still be there… need to investigate

Client Side Object Model (CSOM)

Still _vti_bin/client.svc but supports REST interface now

Very impossible to write own REST access in 2010

REST implemented in ODATA

New functions added to access host of stuff esp Workflow, Business Data, and user Profiles

Can also be access from _api for REST

ListData.svc still around for backward compatibility but you don’t have above new features. Going forward should stop using ListData.svc

More explanation about the new features at dev.office.com

ODATA Tips and Tricks

Just communicate using HttpWebRequest and HttpWebResponse

One can query the result using XDocument.Descendants

For JSON response, result always wrapped in the “d” outer object

This is to prevent replay attached or embedded method calls

JsRender is a good library to access the JSON data

FormDigest has to be provided for put and post method. Need to investigate more

To access fields, use the Display Name for REST API

OAuth and Authentication

Problems in SP2010

RunWithElevatedPriveleges runs as sharepoint\System or revert to Windows identity of host app pool

You may access information that user not permitted to see

However Sandboxed always run as current logged in user

SharePoint 2010 solution only supports user authentication not authorization

In 2013

Apps are now given first class identities, we dont give them user ID and password

In 2013, you have to configure permission for apps

In 2013 everything is claim by default

Between sp2013 and app, token is provided in Oauth

Steve Pascal writes a lot about claims in SP

Every SP installation has one tenant, look at the DB; user profile there is a guid refer to the tenancy

There is a ID stamping on user profile to separate data from tenants

Spence Harbor writes a lot about multi tenancy

Multi tenancy is not recommended for on premise installation of SP, built for O365

While you grant permission for app, it is all or nothing permission for specific scope

Default permission is read, you can request for more inside your app manifest

There is no item level permission for apps

During deployment, user will be notified of the rights request and grant consent to the app

Permission granted on content type… it will be inclusive [Got to investigate to confirm]

STS is secured token service, and ACS acts as one

in 2013 Windows Azure ACS acts as authentication server

ACS lives on cloud, and is there charges to use ACS?

Does that mean we need Internet access? Is there a on premise solution?

http://siteaddress/_layouts/15/appregnew.aspx but will be taken out in future. Have to use PowerShell instead

OAuth must be done in SSL to prevent replay and disable access to info passed on wire

Context token is per session, OAuth token is long live

The authentication workflow

1. Client – Request – SP

2. SP – Request Context Token – ACS

3. ACS – Signed ContextToken - SP

4. SP – Page -IFrame – Client

5. Client – Request IFRAME – App [The request contains the Context Token]

6. App – request token – ACS

7. ACS – Access Token – App [The access token belongs to the user and has specific rights]

8. App – Request and Access Token – SP [Access Token is stored in httpwebrequest header]

9. SP – data – App

10. App – iframe content – Client

Server to Server Trust (S2S)

On premise farms request explicit configuration. Alternative will be to create a high trust app and skip OAuth. Do this when you can’t access ACS.

Slide 35 is obsolete

You might want to disable SSL on dev machine using Powershell

$service = Get-SPSecurityTokenServiceConfig()

$service,AllowOAuthOveHttp = True

FBA access is TBD

For hands on go to http://dev.office.com… under Authorisation and Authentication look for  How to create high-trust apps for SP2013 using the server to server protocol (Advanced Topic)

Remote Event Receiver

SharePoint got to act as a data hub

SharePoint event receiver can now talk to external system

But don’t use this for geo replication or mirroring or sync.

BCS will have event receiver

External Web service can call back SharePoint via token from ACS

No guarantee delivery, non transactional

Tips:

In debugging after VS deploy the WCF app, the secondary web app symbol might not be loaded. To force loading, use Debug –> Start new instance

Workflow

On 2013, workflow is now a service outside of SharePoint.

Moved to Windows Azure Workflow, however it is available for on-premise deployment

Now is WF4.0 based, which has better

-Modelling

-Scale

-Tracking

For SharePoint, there is REST API and communicate via OAuth

However SP2010 workflow still runs in SP2013. Continue to be hosted by SP under .NET 3.5

Windows Azure Workflow is not exactly a Cloud product like SQL Azure

You can now run Windows Azure Workflow on a separate machine out of the SP Farm

Thinking out loud, is it possible to have my own Workflow engine implementation?

WF 3.5 has some serialisation problem

SP 2013 has a new Stage concept but its not similar to State Workflow because the lack of eventing model

SP Designer can now call REST/ SOAP web services

It can also call SP SPI, query DB, Consume feeds

Now in SP Designer, you can switch between designer & sentence style

The lab VM cannot switch user in SP Designer, we have to test it in own build VM

The lab VM also cannot export to Visio. No error message appears

Visual designer runs inside SP Designer but requires that Visio to be installed

Underneath, Stage is actually Flow Step in WF 4.0

In 2013 you can’t associate Task Form directly via SP Designer, reason being Infopath 2013 does not support the Apps Model

Going forward the recommended practice is to create a HTML form

Note on InfoPath 2013

InfoPath 2013 is not being deprecated, but is so more about doing list customisation, offline form and digital signature

Its a play on the XForm, try to stay away from doing code behind for InfoPath 2013

But for developers, look into the new Apps Model with HTML based form

Also consider Access Services 2013 to build good online forms, especially for powerful

Still InfoPath investment developers have in SP2010 it will run in 2013

Also Access 2013 can do almost what LightSwitch can do.

Custom Activity in SP2010/ 2007 cannot be imported for use with SP2013 workflows

But one can look into the Workflow Interop Bridge

WF4.0 workflow for SharePoint is actually declarative. @_@

Custom code should live inside individual web services

There is no custom code activity now

Programmatic workflow can only be created as pure Windows Azure Workflow instance

Direction of workflow as middle tier app for Apps for SP and Apps for Office

Use them for

Model how people work

Automate monitor and improve business process

Connect and integrate with other system

Now WF 4.0 has a tracking DB, which also used by SP2013, you can build analytics around this database

You can now don’t depends on the Workflow History table already

Cool stuff with Stage in SP2013 WF, you can have evaluation on Stage 1, check for ‘bread crumbs’ and rearrange how the WF will run.

In the lab, administrator or system account cannot start workflow instance

Also notice that you can’t sign in as another user already

Apps for SharePoint Model

With Farm Solution,

We have ‘BIG’ server touches, meaning there are