Modern Authentification on VBO 3.0

Modern Authentification on VBO 3.0

Veeam for Office 365 3.0

As we saw in a previous post, Veeam for Office 365 allows the backup and restoration of an Office 365 tenant.
Office 365 2.0

what’s new on VBO 3.0

Veeam has released version 3.0 of Veeam for Office 365. This version offers the following new features:

  • Faster backup for OneDrive for Business and Sharepoint Online.
  • Possibility to include or exclude personal company sites from the backup (Sharepoint online).
  • Multifactor authentication support to improve the security of Office 365 backup.Modern Authentification is now supported on VBO 3.0
  • Proxy server support
  • Office 365 Data Protection Report
  • Possibility to have advanced criteria for searches (object name, email,…).
  • On-demand backup tasks, so that you can run a backup without a schedule (on-demand execution).
  • Ability to rename an existing organization in the Veeam console.

Install Veeam for Office 365

Three MSI files are provided by Veeam (the explorers for Sharepoint and Exchange) as well as the installation setup. Run the Veeam Backup O365 install file.

Setup Veeam Office 365 3.0 Modern Authentification on VBO 3.0

On the End-User licence Agreement windows, check the checkboxes and click Next.

Accept End-User software licence agreement Modern Authentification on VBO 3.0

Click Next in the Program Features window and click on Install.

Select Program Features on the Veeam installation

Install is on progress. Click

installation Veeam Office 365 Modern Authentification on VBO 3.0

Click Finish when the installation is complete. You can now add organisation. On the ribbon click on Add. Org. A wizard Appear, you can choose the authentification method :

  • Modern Authentification : Choose this option if you use MFA or certificate for the authentification.
  • Basic Authentification : Choose this option for legacy authentification.

Choose authentification method for access at Office 365 Modern Authentification on VBO 3.0

If you want to use Modern Authentification, you need to insert Application ID. The next section describes how you can create Application ID.

Create Application ID

On the Azure Portal, click on Azure Active Directory then on App registrations and on New Application registration in the central panel.

Create App Registration on Veeam

On the Name field, enter Veeam Office 365 v4 and select Web App / API in the drop-down list and enter https://localhost on the field. Start the creation by clicking on Register.

Create App registration for VBO Modern Authentification on Veeam Office 365.

The creation is now operational. Copy the Application ID into the notepad and click on Settings.

Copy Application ID on Azure application

Click on Api permission then on Add a permission.

Configure required permissions Modern Authentification on Veeam

Click on Microsoft Graph.

Configure permission

Click on Application permissions

Configure permission

Select the permissions :

  • Group / Group.Read.all
  • Directory / Directory.Read.All

Click Add a permission to validate the choice.

Add a permission

Click on Grant admin consent for…. A message appear, click on Yes.

Grant admin consent

Click on Certificates & secrets then on New Client secret.

Generate new client secret Modern Authentification

Enter Description and choose when the secret expires. Click Add for validate the modification.

Select expiration Secret for Veeam Modern Authentification

Copy the value of the secret to Notepad.

Value of secret

Copy the value of the secret to Notepad. Paste Application ID on the Application ID Field and the Value of the Client secret on the Application secret. Enter Username of the administrator account or user who has the appropriate rights to the Office 365.

Configure VBO 3.0 with Application ID et Application Secret.

On the Office 365 portal, log in with the user account used by Veeam. Click on account then on My Account.

Configure permission on Office 365 portal Modern Authentification on VBO 3.0

A new windows appear, click on Security & Privacy menu. Expand the Additional security verification menu and click on Create and manage app passwords.

Configure security on Office 365 portal

Click on Create button for create new application password.

Create app password

Enter the name for the password (VBO for example). Password has generated, you can copy the password.

Copy app password to the Office 365 Authentification on VBO 3.0  Modern Authentification on VBO 3.0

Copy the password into the Veeam console and click on Next.

Copy password on the veeam console

Check that all points are validated. After that organisation has been added to the console. You can now backup your tenant Office 365

Verification before add Office 365 organisation

Leave a comment

Your email address will not be published. Required fields are marked *