2. SPC208

7. ServicesScenariosDescriptions SharePoint to Exchange eDiscoverySearch and put legal holds on Exchange mailboxes from SharePoint Site MailboxesProvisioning team mail boxes in Exchange from SharePoint MySite Project Tasks SyncTasks in Exchange are synchronized with tasks in SharePoint “My” site High Resolution PhotosSharePoint syncs users’ high resolution photos from Exchange SharePoint to SharePoint Translation serviceDocuments hosted in SharePoint are translated on the fly Hybrid: Duet/SAPReports from on-premise SAP presented in SharePoint Online Hybrid SearchSearching in SharePoint on-premise brings results from the SharePoint online, vice-versa SharePoint to MTW Multi-tenant Workflows (MTW) Workflows are triggered from SharePoint and execute on behalf of users in MTW

11. Security Token Service Exchange Online SharePoint Online Peter@Contoso browses to SP page and triggers tasks sync from Exchange 1 2 3 5 6 Online Security Token Service OM trust MSO-DS ACS trust sync 4

17. Security Token Service Exchange SharePoint peter@contoso browses to SP page and triggers hold on Exchange mailbox 1 2 3 5 6 On-premise Security Token Service OM trust 4 App Management Service User Profile App (UPA) Service

19. Configuration stepsIn layman terms…SharePointExchange 1.S2S trust establishmentCertificate stuff… New- SPTrustedSecurityTokenIssuer New-PartnerApplication 2.Permissions for principal Allows A to access B Set-SPAppPrincipalPermissionsSet-PartnerApplication 3.Scenario specific settings Special sauce…

23. Exchange Security Token Service SharePoint (online) Security Token Service MSO-DS ACS SharePoint (on-premise) peter@contoso browses to SP page and starts a query trust 1 2 3 4 5 Online sync On-premise trust Security Token Service OM trust 6 sync Active Directory App Management Service User Profile App (UPA) Service SPO-DS sync

36. PatternsDescriptions S2S Incoming*User is signed in to high-trust app and calls triggered to SharePoint S2S Outgoing*User is signed in to SharePoint and calls triggered to high-trust app Marketplace applications authentication Authenticating the marketplace applications in SharePoint ImpersonationBeing able to impersonate a user in SharePoint App-only authenticationApplication by itself calls to SharePoint resources; no user identity Non-interactive authenticationUser initiated the S2S call but the execution of call is at a later time when user may not be signed in to SharePoint (Example: Timer Jobs)

40. MySPC