Why should SharePoint Apps be hosted on a different domain than SharePoint sites?

You must configure a new name in Domain Name Services (DNS) to host SharePoint apps.

The domain name should not be a subdomain of your existing domain (used to host SharePoint sites) to help prevent unauthorized access to user data and to reduce the possibility of cross-site scripting attacks.

For example, if SharePoint sites are at Contoso.com, consider ContosoApps.com instead of App.Contoso.com as the domain name. For more information, see Plan for apps for SharePoint 2013.



Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk