Meet the Cast

Before we get too far, let’s agree on some terminology. Two or more identities are involved in S2S authentication requests.

The Service Account

The Service account is the account that actually makes the Exchange Web Services S2S request. It’s called a Service account because typically it is the account that another application, sometimes known as a service, is running under. In reality, the Service account can be any domain account. In the Contoso Ltd. office supply example, Phyllis represents the Service account.

Now, there is no need for the Service account to have a Mailbox on the system. Nor does the Service account need delegate or owner rights to any of the Mailboxes on the system. All the Service account needs are the appropriate ...

Get Inside Microsoft® Exchange Server 2007 Web Services now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.