Restore: Issue with device code flow auth and CBAPs

[superdevo]

Hello,
We're having an issue when trying to validate veeam restore O365 auth against our CBAPs using MS device code flow.
The code flow is not passing the AD domain joined attribute and MS support is asking us if Veeam can use a different auth flow.
Do you know if using a different flow is possible? Did anybody experienced this type of issue?

Veeam support case ID: 05585502

David

[Mildur]

Hi David

Thanks for the case number.
May I know what CBAP means? I cannot find any reference to this acronym.

Changing the authentication flow may require changes to our software, so I'm not sure if there is a fast solution for this case.
As Microsoft told you, one workaround is to exclude the user for now from the conditional access policy.
Let's wait if your support engineer from the veeam case has additional ideas.

Thanks
Fabian

[Mildur]

Hi David

I discussed this internally yesterday.
Can you try to restore with our Restore Portal in VB365 V6?
Device code is not used with the restore portal.

Thanks
Fabian

[superdevo]

@mildur thank you!
I've excluded for now, but very helpful to know that the restore portal does not use the device code flow.
Apologies for the acronym, it is Conditional Based Access Policies.

I'll put in a feature request for V7

[Mildur]

Thanks for the request. As your support engineer told you, it's the first time we have that request.
We don't have such a request on our road map yet, if it would implemented, it will not be V7.

Could you consider using the restore portal instead of explorers for the restores? If not, could you tell me the reason and if you are missing any features?

Thanks
Fabian