This document summarizes the configuration of SharePoint web applications, including application pools, web sites, authentication methods, URLs, and zones. It describes three application pools that support different web applications and sites for an intranet (using Windows authentication) and internet (using anonymous access). The internet-facing web applications include anonymous and authenticated access for customers and site authors. Database and server roles are also summarized, including SQL Server for database support and web/application servers.

1. Application Pool 2
IIS Web Site - “SharePoint Web Services”
for SharePoint Server 2013
Users
Zones and Authentication
Site Collections
Sites
Content Databases
Zones and URLs
Site authors and developers
http://authoring.contoso.com:8000
http//www.contoso.com:8000
Search Crawl Account
http://authoring.contoso.com:8000
http//www.contoso.com:8000
Default zone / Windows integrated
AD DS with Windows NTLM authentication
Application Pool 3
Web Application: Contoso Sites (http://internal:8000)
USERS ZONE LOAD-BALANCED URL
http://authoring.contoso.com:8000
USERS ZONE
Default
LOAD-BALANCED URL
http://www.contoso.com:8000
Internet http://www.contoso.com
Application Pools
Web Applications
Design sample:
Internet sites in Microsoft Azure
© 2014 Microsoft Corporation. All rights reserved. To send feedback about this documentation, please write to us at ITSPdocs@microsoft.com.
Server Farm
Administration Site
Services
Web Servers
Application Servers
SQL Database Servers
Database servers with SQL Server
installed and configured to support
SQL clustering, mirroring, or
AlwaysOn (AlwaysOn applies to SQL
Server 2012 only)
Application Pool 1
Web Application: Central
Administration Site
Search Managed
Metadata
User Profile
Default Group
http://internal:8000
http://authoring.contoso.com:8000
https://secure.contoso.com
http://www.contoso.com:8000
Active Directory Domain Services (AD DS)
Anonymous customers
http://www.contoso.com
Authenticated customers
https://secure.contoso.com
Internet zone / anonymous
Anonymous
http://assets.contoso.com:8000
Site
authors
Site
authors
Anonymous
customers
USERS ZONE
InternetAnonymous
customers
http://assets.contoso.com
LOAD-BALANCED URL
http://assets.contoso.com:8000Site
authors
Authenticated
customers
Internet
Authenticated
customers
Extranet https://secure.contoso.com Extranet https://secureassets.contoso.com
http://www.contoso.com http://assets.contoso.com
https://secureassets.contoso.com
Microsoft Azure Active Directory with SAML authentication
Extranet zone / SAML
Microsoft Azure
Path-based
site collection
Host-named
site collection
Host-named
site collection
Host-named
site collection
Default
Notes on Services for Internet sites
Managed Metadata — Be sure to select “This service
application is the default storage location for column
specific term sets.”
App Management — At this time we do not recommend
using Apps in a public-facing Internet site in Microsoft
Azure.