Inside Microsoft® Exchange Server 2007 Web Services

Summary

To be part of a larger composite work process, Exchange Web Services exposes the idea of Server to Server (S2S) authentication, which enables service accounts to act on behalf of a user as if the user is actually making the request. There are several benefits to S2S authentication, including the principle of least privilege and the ability to configure the various rights as an Exchange Administrator. Exchange Impersonation is the publicly supported way for third-party developers to use S2S authentication. After the proper rights are configured, you simply add the ExchangeImpersonation SOAP header to indicate who the call should act as, and then you make your call. Token Serialization is an S2S authentication feature that Microsoft does ...