Adding M365 tenant PowerShell problem

[adam900331]

Hy!

I would like to add the tenant to Veeam Backup for M365 with moder authnetication using legacy authentication protocols. I created everything (App in Azure, technical user with correct permission). These check are succes:
- Connect to Microsoft Graph
- Connect to EWS
- Connect to SharePoint
But the PowerShell is fail:
- Connect to PowerShell: Connecting to remote server outlook.office365.com failed with the following error message : Access is denied.

I know that the Microsoft deprected the basic auth, but I enabled for the basic auth only the backup user, but the error is still being.
I use this how-to the enable basic auth for one user: https://vanbrenk.blogspot.com/2019/04/e ... r-one.html

What can I config to use the basic auth?

Thanks.

[Mildur]

Hi Adam

Microsoft has already started to actively block this method. A customer cannot just enable it again.
Can I ask you, why you want to add your M365 tenant with the deprecated method? What's the use case?

Best,
Fabian

[Polina]

Hi adam,

Authentication with legacy protocols requires the usage of Basic Auth in M365, however, it is now disabled in all tenants without exceptions - see this article.

App passwords that Veeam was using for Modern auth with legacy protocols also cannot be used anymore:

"The deprecation of basic authentication also prevents the use of app passwords with apps that don't support two-step verification."

[adam900331]

Because the 'security defaults' is disabled in our client tenant.

But If I can not use the basic auth, why can I select it in Veeam console during adding the tanant? Why do you remove these option during the wizard? It's a little misleading.

Thanks.

[Mildur]

The option will be removed in our upcoming version when you add a new or edit an organization.

Best,
Fabian

[adam900331]

Thanks.

[adam900331]

I tested the organization adding. The security defaults is disabled in our test tenant, but I can add the tenant with modern auth. How could I add the org without security enabled?

Thanks.

[Mildur]

I don't understand the issue.
Adding a M365 organization with Modern App-Only Authentication should work with Security Defaults enabled or disabled.
Just add the organization with Modern App-Only Authentication and it will work.

Best,
Fabian