Maintain control of your Microsoft 365 data
Mildur
Product Manager
Posts: 8549
Liked: 2223 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Mildur »

Thank You Mike :-)
Product Management Analyst @ Veeam Software
m.novelli
Veeam ProPartner
Posts: 504
Liked: 84 times
Joined: Dec 29, 2009 12:48 pm
Full Name: Marco Novelli
Location: Asti - Italy
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by m.novelli »

WOHA!
Mildur
Product Manager
Posts: 8549
Liked: 2223 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Mildur » 1 person likes this post

Veeam has released the Update for Support with disabled Basic Auth
What's New

• Support for Office 365 tenants using modern app-only authentication with disabled legacy protocols. In the new mode, VBO performs all its backup and restore operations using an Azure AD application instead of user credentials. This new mode addresses the needs of customers using Microsoft Security Defaults in their Office 365 tenant organizations.
• Support for leveraging auxiliary backup applications to enable faster SharePoint Online and OneDrive for Business backups for Office 365 tenants using modern app-only authentication.
https://www.veeam.com/kb3145

These are the restrictions:
When protecting Office 365 tenants using modern app-only authentication, consider the following:
• Discovery Search and Public Folder mailboxes are not supported.
• Dynamic Distribution groups are not supported.
• The type property for shared and resource/equipment mailboxes cannot be resolved. Such mailboxes will be available for backup with a general ‘User’ type.
• SharePoint Web Parts can only backed up if their ‘exportmode’ property is enabled. Non exportable Web Parts are not supported.
• OneNote restore is not supported.
• SharePoint Web Part customized template cannot be preserved upon a restore. All Web Parts will be restored with the default template.
• The ‘Allow multiple responses’ setting in survey lists within team modern sites is not preserved upon a restore.
• The ‘Measure-VBOOrganizationFullBackupSize’ cmdlet is not supported.
Product Management Analyst @ Veeam Software
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Mike Resseler » 1 person likes this post

@Mildur Yep, you are faster than we can add the information in the various topics ;-)
Mildur
Product Manager
Posts: 8549
Liked: 2223 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Mildur »

haha, That's good :-)
Product Management Analyst @ Veeam Software
nicolascirnigliaro
Lurker
Posts: 1
Liked: never
Joined: Jan 29, 2020 2:39 pm
Full Name: Nicolas Cirnigliaro
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by nicolascirnigliaro »

I can confirm that is working now on our side. Also, the new wizard to register the App into Azure AD is fast and simple! Good job!
mnordstr
Service Provider
Posts: 10
Liked: 6 times
Joined: May 11, 2017 5:40 pm
Full Name: Mattias Nordstrom
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by mnordstr »

Can confirm working here also, and excellent work on the wizard, no need to rtfm :)
HDClown
Enthusiast
Posts: 45
Liked: 6 times
Joined: Dec 27, 2012 12:25 pm
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by HDClown »

• The type property for shared and resource/equipment mailboxes cannot be resolved. Such mailboxes will be available for backup with a general ‘User’ type.
This doesn't cause shared/resource/equipment mailboxes to get counted as a regular licensed user, does it?
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Mike Resseler »

@HDClown No, our team has found a way to figure this out. But we hope that in the future we have a better way to query this
Hoi
Novice
Posts: 4
Liked: never
Joined: Feb 07, 2020 9:01 am
Full Name: Ernest Chan
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Hoi »

Hi,

For modern authentication with "Allow for using legacy authentication protocol", we can either use Application secret or Application Certificate to finish the authentication.

However, for modern app-only authentication with disabled legacy protocols, we can only use Application Certificate to finish the authentication.

I would like to know that why we can only use Application Certificate to finish the modern authentication with disabled legacy protocol and is it a compulsory item for the authentication?

Thank you
Polina
Veeam Software
Posts: 2939
Liked: 681 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: v3 - LegacyAuthProtocolIsEnabled still required?

Post by Polina » 1 person likes this post

Hi Ernest and welcome to Veeam Forums!

Using a certificate is compulsory in this case because only in this way VBO can access all of the required APIs. With app secret, some of the APIs we need for backup are not available and VBO has to combine app authentication with user credentials (and hence the usage of legacy protocols).

Thanks!
Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 21 guests