Microsoft recommends blocking device code flow

[sumeet]

Hello,

Based on this link from Microsoft -- https://learn.microsoft.com/en-us/entra ... 5-MVP-9501

"Device code flow is a high-risk authentication flow that might be used as part of a phishing attack or to access corporate resources on unmanaged devices"

And device code flow is used while configuring M365 Org using modern app authentication -- https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70
And also while using restores.

We are already got a client who has this disabled. What is the alternative from Veeam for this?

Thanks,
-Sumeet.

[Mike Resseler]

Hi Sumeet,
There is in the future an MSFT alternative but it is in preview at this point in time if I am not mistaken.

To give you a quick answer, you can always use the manual way of adding a tenant. Device code flow is a way to make it easier, but if the tenant creates the app registration manually, you can do this without that device code flow.

For restores: see here: https://helpcenter.veeam.com/docs/vbo36 ... tml?ver=70