Skip to main content
Version: 4.1 (2026 H2)

System Overview

primedocs is a multi-layered platform made up of several server services, a central authentication service, multiple databases, and various clients (touchpoints). The following overview shows how these components work together and what role each of them plays.

Architecture overview of primedocs: Windows client and Office add-ins, primedocs Auth (Identity Server), primedocs Server Apps (including Service/Data Service, Connect API, Admin API, MCP, JobHost, SQL Database, primedocs Web), user synchronization, and integration of external LOB apps via Connect and Web API

Clients (touchpoints)

ComponentRole
primedocs Web (React web app)The main UI outside of Office. Communicates with the server through the Web API.
Office Web Add-ins (Office.js)In-Office integration for Word, Excel, PowerPoint, and Outlook — in the browser, on macOS, and on Windows.
primedocs Desktop (WPF Windows client)Windows client with a local offline cache (ESENT) and address/data providers. Signs in against the Identity Server via OIDC and synchronizes through the sync service.
Office COM Add-ins (VSTO)Legacy Office integration on Windows; being replaced by the Web Add-ins.
Web AdminWeb interface for managing data sources, templates, users, and permissions.

Server components (primedocs Server Apps)

ComponentRole
Web API (PrimeDocs.Web.WebApi)Versioned REST interface — the central HTTP API for the web touchpoints and for third-party systems. Versioned without breaking changes.
Sync Service (PrimeDocs.Service.Host)Synchronizes data for the desktop client (offline cache). Backward compatibility is mandatory.
Data ServiceDelivers address and master data through the configured address providers to the client and server.
Document Creation Server (DCS)Server-side document generation — creates documents without client involvement, e.g. from third-party systems via the Connect interface.
JobHostRuns background jobs: provisioning/synchronization, import/export, scheduled tasks.
Document EngineGeneration pipeline (chain of responsibility) for Word, Excel, PowerPoint, and Outlook. Runs both server-side and in the client. See Document Generation.
MCP Server (PrimeDocs.Web.Mcp)Model Context Protocol server through which AI agents (e.g. Microsoft 365 Copilot) can invoke primedocs functions. See MCP integration.

Authentication

ComponentRole
Identity Server (IdS) (PrimeDocs.IdentityServer.CustomerHost)Central authentication via OIDC/OAuth 2.0 and JWT. Connects external identity sources (Microsoft Entra ID, Active Directory, Microsoft 365). All clients and server services authenticate against the IdS.

Databases (SQL Server)

primedocs distinguishes between tenant-specific and instance-wide data:

DatabaseContent
Datasource database (PrimeDocsContext)One instance per datasource (tenant): templates, snippets, users, profiles, organizational units, and permissions.
Operations database (OperationContext)Instance-wide data: tokens, logging, and SCIM provisioning data (users, groups, requests). Also holds the Identity Server store (configuration and persisted grants) — physically the same database, with separate migration tracking.

Data sources and synchronization

ComponentRole
Address Provider (AP)Pluggable data sources for address and master data (LDAP, CRM, SharePoint, HTTP, SQL, etc.) through the Select interface.
User synchronizationProvisions users from AD, SQL, or custom sources — via LDAP/SQL/HTTP and SCIM.

External systems (LOB apps)

Third-party systems — Win32 applications, Office add-ins, or any service — integrate with primedocs in two ways: the Connect interface (XML-based, for automating document generation) and the Web API (REST). The SharePoint Connector is available in addition. Access is possible across platforms (browser, Windows, macOS, Android).

In this section