Modern Authentification on VBO 3.0

Modern Authentification on VBO 3.0

Veeam for Office 365 3.0

As we saw in a previous post, Veeam for Office 365 allows the backup and restoration of an Office 365 tenant.
Office 365 2.0

what’s new on VBO 3.0

Veeam has released version 3.0 of Veeam for Office 365. This version offers the following new features:

  • Faster backup for OneDrive for Business and Sharepoint Online.
  • Possibility to include or exclude personal company sites from the backup (Sharepoint online).
  • Multifactor authentication support to improve the security of Office 365 backup.Modern Authentification is now supported on VBO 3.0
  • Proxy server support
  • Office 365 Data Protection Report
  • Possibility to have advanced criteria for searches (object name, email,…).
  • On-demand backup tasks, so that you can run a backup without a schedule (on-demand execution).
  • Ability to rename an existing organization in the Veeam console.

Install Veeam for Office 365

Three MSI files are provided by Veeam (the explorers for Sharepoint and Exchange) as well as the installation setup. Run the Veeam Backup O365 install file.

Setup Veeam Office 365 3.0

On the End-User licence Agreement windows, check the checkboxes and click Next.

Accept End-User software licence agreement

Click Next in the Program Features window and click on Install.

Select Program Features on the Veeam installation

Install is on progress. Click

installation Veeam Office 365

Click Finish when the installation is complete. You can now add organisation. On the ribbon click on Add. Org. A wizard Appear, you can choose the authentification method :

  • Modern Authentification : Choose this option if you use MFA or certificate for the authentification.
  • Basic Authentification : Choose this option for legacy authentification.
Choose authentification method for access at Office 365

If you want to use Modern Authentification, you need to insert Application ID. The next section describes how you can create Application ID.

Create Application ID

On the Azure Portal, click on Azure Active Directory. Click on App registrations and on New Application registration in the central panel.

Create App Registration on Veeam

On the Name field, enter VBO app and select Web App / API in the drop-down list. On the Sign-On URL field enter https://vboapp. Start the creation by clicking on Create.

Create App registration for VBO

The creation is now operational. Copy the Application ID into the notepad and click on Settings.

Create VBO APP on Azure

On the Settings panel, click on Required permissions and click on Add.

Configure required permissions

On the Settings panel, click on Required permissions and click on Add. Click on Select an API and select Microsoft Graph. Click on Select to validate the modification.

Select API for Veeam APP

Select the permissions :

  • Read all groups
  • Read directory data

Click Select to validate the choice.

Select permissions

On the App registrations (Preview) menu, click on VBO App.

Configure permission VBO 3

Click on API permissions then on Grant admin consent for…. A message appear, click on Yes.

Configure permissions

Click on Certificates & secrets then on New Client secret.

Generate new client secret

Enter Description and choose when the secret expires. Click Add for validate the modification.

Select expiration Secret for Veeam

Copy the value of the secret to Notepad.

Value of secret

Copy the value of the secret to Notepad. Paste Application ID on the Application ID Field and the Value of the Client secret on the Application secret. Enter Username of the administrator account or user who has the appropriate rights to the Office 365.

Configure VBO 3.0 with Application ID et Application Secret.

On the Office 365 portal, log in with the account used by Veeam. Click on Settings in the portal.

Configure Office 365 portal

Click to the Office 365 link on the menu Your app settings.

Configure Office 365 menu

A new windows appear, click on Security & Privacy menu. Expand the Additional security verification menu and click on Create and manage app passwords.

Configure security on Office 365 portal

Click on Create button for create new application password.

Create app password

Enter the name for the password (VBO for example). Password has generated, you can copy the password.

Copy app password to the Office 365

Copy the password into the Veeam console and click on Next.

Copy password on the veeam console

Check that all points are validated. After that organisation has been added to the console. You can now backup your tenant Office 365

Verification before add Office 365 organisation

Leave a comment

Your email address will not be published. Required fields are marked *