Designing a Microsoft SharePoint 2010 Infrastructure Vol 1 part 10. This course is intended for IT Professionals who use Microsoft SharePoint 2010 in a team-based, medium-sized to large environment. While they may have implemented a SharePoint deployment, they have limited experience in designing a SharePoint infrastructure. They likely work as a senior administrator who acts as a technical lead over a team of administrators. Members of this audience should have at least 6 months experience with SharePoint 2010. | Planning a Service Application Architecture 2-11 The Security Token Service Application. This service manages authentication by acting as a broker for SharePoint 2010. It can support multiple authentication providers. Most of these services are self-descriptive such as Excel Services and Access Services. However there are some services that are important for your design but have less obvious roles. The following list describes these service applications Secure Store Service. This service provides single sign-on SSO proxy functionality. This is essential if you want to use the Business Data Connectivity Services to access line-of-business LOB servers seamlessly for users. Managed Metadata Service. This service provides the capability to create and store the taxonomy information such as document metadata that is used throughout SharePoint 2010. This is a core function for many other services. User Profile Service. This service provides social networking functionality such as user profile import and People Search. Business Data Connectivity Services. This service provides read and write access to LOB data sources. This is essential for deployments that must deliver composite application functionality to users. State Service. This service provides temporary storage of user session data for SharePoint Server components. MCT USE ONLY. STUDENT USE PROHIBITED 2-12 Designing a Microsoft SharePoint 2010 Infrastructure Service Application Security Model Improved security model Clai ms-based authorization in the farm Communication via Web services based on WCF Support for SSL security Application isolation Each service application uses a separate database and optionally a separate application pool Support for multiple service applications for a service with different accounts and databases Multi-tenancy Most services are capable of multi-tenancy Application-level security for content isolation Key Points SharePoint 2010 has updated its security model to offer claims-based .
