Tenant onboarding with Devicelogin

[oscarm]

All,

as an MSP we have several customers we backup with Veeam for MS365. We see more and more issues when onboarding new customers based on devicelogin codes. Most customers have blocked this with conditional access and even Microsoft suggests not to allow device login codes anymore.

https://learn.microsoft.com/en-us/entra ... tion-flows

Is there another mechanism to onboard a new customer other than manually create an app registration and manually set all permissions?

[Mildur]

Hi Oscar,

No, unfortunately not today.
It is either manually pre-creating an app or letting the Veeam application create it through the device code flow.

To help with the manual steps of pre-creating the application, you could create a PowerShell script that connects to an Entra ID tenant over Graph (Connect-MgGraph) and then registers a new application with the mandatory permissions and a custom certificate for authentication.

Then provide this script to your customers.

Best,
Fabian