User IDs are validated against Active Directory Domain Services (AD°DS) as well as various role or membership providers. SPGroup security information may also be stored in a collection of cross-site groups for the site collection.