Session Abstract

Flipping it: Instead of AI living inside your apps, your apps now live inside AI! Instead of sending users to yet another tab, your application now lives directly inside the AI conversation. interactive, real-time, and context aware. In this session, we skip the theory and start with a live demo. You will see an MCP App running inside Copilot chat window, handling a real workflow without a single context switch. From there, we peel back the layers: what an MCP App is actually made of, how the host layer and your server divide responsibilities, and what the security primitives look like in practice. Then we get seriou: Authentication and SSO is the part that bites most teams, and we cover it properly. We walk through OAuth 2.1 with PKCE as the spec requires it, show how to wire enterprise SSO through Entra ID, and discuss what token scoping and consent flows look like when the window is owned by Microsoft as is in Microsoft Teams. We also cover the pitfalls: over-permissioned tokens, session handling across conversations, and prompt injection risks that come with rendering UI inside a chat interface. You will leave with a working mental model, a clear decision framework for what you must build versus what the platform handles, and enough practical knowledge to start building MCP Apps that are actually ready for production.

Albert-Jan Schot

As a senior cloud architect Albert-Jan Schot enjoys stepping up to the challenge of designing, developing and building innovative cloud solutions. He is a valuable source of knowledge for his colleagues, customers and the worldwide Microsoft-community. With his no-nonsense and can-do mentality he brings a unique combination of in-depth hands-on experience and consultancy skills on all levels to any team. As a CTO within Blis Digital Albert-Jan is responsible for the technical vision and strategy within the low-code practice.