Audit of a SharePoint environment with focus on data flow and external attack surface, including configuration of an ADFS infrastructure according to best practices and a penetration test of the external servers