Restore portal - Entra Application

[logtved]

Hello

when setting the restore portal for M365 it needs an Microsoft Entra application - as stated in this one: post500677.html?hilit=m365%20azure%20re ... al#p500677
you can just use a free one.

However I wonder what it is used for exactly as for our own org we would not use anything to authenticate or allow customers to authenticate via our azure/entra org.
The documentation states: https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=80

Important
Microsoft Entra application that end users and restore operators from tenant organizations will use to access Restore Portal must be created for a Microsoft 365 organization on a service provider side.

My logic would say that the authentication should be on the customers Azure org. and not ours.
I cannot see in the documentation what it actually needs this for.

[Mildur]

Hi Mark,

Authentication is always performed against the customer's Entra ID organization. Each tenant uses the pre-approved application (and its permissions) stored in the Service Provider tenant.
Once authentication is successful, the restore portal grants users access to their own backups, or, in the case of a Restore Operator, to other backups they have been granted access to.

The Entra ID application itself requires only two permissions, which do not allow the customer to access any production data in the Service Provider tenant, nor the Service Provider to access any production data in the customer tenant.

Best,
Fabian