Modern Authentification on VBO 3.0

Modern Authentification on VBO 3.0

Veeam for Office 365 3.0

As we saw in a previous post, Veeam for Office 365 allows the backup and restoration of an Office 365 tenant.
Office 365 2.0

what’s new on VBO 3.0

Veeam has released version 3.0 of Veeam for Office 365. This version offers the following new features:
  • Faster backup for OneDrive for Business and Sharepoint Online.
  • Possibility to include or exclude personal company sites from the backup (Sharepoint online).
  • Multifactor authentication support to improve the security of Office 365 backup.Modern Authentification is now supported on VBO 3.0
  • Proxy server support
  • Office 365 Data Protection Report
  • Possibility to have advanced criteria for searches (object name, email,…).
  • On-demand backup tasks, so that you can run a backup without a schedule (on-demand execution).
  • Ability to rename an existing organization in the Veeam console.

Install Veeam for Office 365

Three MSI files are provided by Veeam (the explorers for Sharepoint and Exchange) as well as the installation setup. Run the Veeam Backup O365 install file.

Setup Veeam Office 365 3.0

On the End-User licence Agreement windows, check the checkboxes and click Next.

Accept End-User software licence agreement

Click Next in the Program Features window and click on Install.

Select Program Features on the Veeam installation

Install is on progress. Click

installation Veeam Office 365

Click Finish when the installation is complete. You can now add organisation. On the ribbon click on Add. Org. A wizard Appear, you can choose the authentification method :

  • Modern Authentification : Choose this option if you use MFA or certificate for the authentification.
  • Basic Authentification : Choose this option for legacy authentification.
  • Choose authentification method for access at Office 365

    If you want to use Modern Authentification, you need to insert Application ID. The next section describes how you can create Application ID.

    Create Application ID

    On the Azure Portal, click on Azure Active Directory. Click on App registrations and on New Application registration in the central panel.

    Create App Registration on Veeam

    On the Name field, enter VBO app and select Web App / API in the drop-down list. On the Sign-On URL field enter https://vboapp. Start the creation by clicking on Create.

    Create App registration for VBO

    The creation is now operational. Copy the Application ID into the notepad and click on Settings.

    Create VBO APP on Azure

    On the Settings panel, click on Required permissions and click on Add.

    Configure required permissions

    On the Settings panel, click on Required permissions and click on Add. Click on Select an API and select Microsoft Graph. Click on Select to validate the modification.

    Select API for Veeam APP

    Select the permissions :

    • Read all groups
    • Read directory data
    Click Select to validate the choice.

    Select permissions

    On the App registrations (Preview) menu, click on VBO App.

    Configure permission VBO 3

    Click on API permissions then on Grant admin consent for…. A message appear, click on Yes.

    Configure permissions

    Click on Certificates & secrets then on New Client secret.

    Generate new client secret

    Enter Description and choose when the secret expires. Click Add for validate the modification.

    Select expiration Secret for Veeam

    Copy the value of the secret to Notepad.

    Value of secret

    Copy the value of the secret to Notepad. Paste Application ID on the Application ID Field and the Value of the Client secret on the Application secret. Enter Username of the administrator account or user who has the appropriate rights to the Office 365.

    Configure VBO 3.0 with Application ID et Application Secret.

    On the Office 365 portal, log in with the account used by Veeam. Click on Settings in the portal.

    Configure Office 365 portal

    Click to the Office 365 link on the menu Your app settings.

    Configure Office 365 menu

    A new windows appear, click on Security & Privacy menu. Expand the Additional security verification menu and click on Create and manage app passwords.

    Configure security on Office 365 portal

    Click on Create button for create new application password.

    Create app password

    Enter the name for the password (VBO for example). Password has generated, you can copy the password.

    Copy app password to the Office 365

    Copy the password into the Veeam console and click on Next.

    Copy password on the veeam console

    Check that all points are validated. After that organisation has been added to the console. You can now backup your tenant Office 365

    Verification before add Office 365 organisation

Leave a Reply

Your email address will not be published. Required fields are marked *