I'm reading up on SharePoint Online as a candidate for our upcoming intranet, and have a couple of questions.

Let's say I need our users to access some on-premise data, and I write a provider based SharePoint add-in (which run on an on-premise server). The add-in require users to be authorized before serving them the data. What's best practice when it comes to authenticating and authorizing the users - could the client side of my add-in reuse some SSO/OAuth token or something from the SharePoint Online session, and pass this token on to the server-side my add-inn, and my server-side add-in (or preferably some firewall type of software in front of my sevice) could then authorize users based on this token?

1 Answer 1


This should work if you use AzureAD as your SSO provider for the on-prem app.

  • Thanks for your reply! Using AzureAD as an SSO provider for the on-prem app is only a matter of configuration, I assume - as long as my on-prem app has network access to AzureAD, and I set up things such as certificates and stuff, this should be pretty straight forward?
    – kenneho
    Jun 13, 2019 at 12:17
  • Correct, it is basically setting up ADFS, but using AzureAD instead of your own ADFS servers. docs.microsoft.com/en-us/azure/active-directory/saas-apps/… Jun 14, 2019 at 16:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.