Maintain control of your Microsoft Office 365 email data
Post Reply
renedubs
Lurker
Posts: 1
Liked: never
Joined: May 20, 2019 3:36 pm
Contact:

Federation related error when adding new organisation

Post by renedubs » May 20, 2019 3:52 pm

HI @all

I'm trying to add a new organization. Connect ot Graph / EWS is OK, but powershell doesn't work. I get the error: "Connect to PowerShell: The partner returned a bad sign-in name or password error. - For more information, see Federation Error-handling Scenarios."

I'm working with a user including 2-factor authentication. Using the app-password.

What I have to-do?

Best Regards
René

Case #03573652

nielsengelen
Veeam Software
Posts: 2649
Liked: 546 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: Federation related error when adding new organisation

Post by nielsengelen » May 20, 2019 8:20 pm

As you made a support case, I would wait for support for assistance.
VCP-DCV
Veeam Certified Architect (VMCA)
http://foonet.be

Mike Resseler
Product Manager
Posts: 5749
Liked: 613 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Federation related error when adding new organisation

Post by Mike Resseler » May 21, 2019 8:29 am

Hi Rene,

First: Welcome to the forums!
Second: Are you using a federated account? And in what format are you using it?

Padre880
Novice
Posts: 6
Liked: never
Joined: Apr 25, 2019 8:31 am
Contact:

Re: Federation related error when adding new organisation

Post by Padre880 » Oct 04, 2019 9:13 am

Hello,
I am having the exact same issue.
Application created and permissions assigned.
service account is exchange and sharepoint admin.
App password created... Grpah and EWS are ok, PowerShell is not.
It is an onprem account, synced with AD connect.

Using Basic authentication works fine with the AD password.
I am getting this error when using Modern Auth

Any help?
Thank you

Polina
Veeam Software
Posts: 891
Liked: 140 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Federation related error when adding new organisation

Post by Polina » Oct 04, 2019 10:28 am

Hi Padre880,

Please use an account with MFA enabled on the O365 side. VBO doesn't support federated accounts with MFA configured via ADFS or any 3rd party tools.

Thanks!

marcin baran
Novice
Posts: 3
Liked: never
Joined: Oct 04, 2019 1:10 pm
Full Name: Marcin Baran
Contact:

Re: Federation related error when adding new organisation

Post by marcin baran » Oct 04, 2019 1:15 pm

Hello,

Even with account with MFA enable on the office365 error still occurs.
Did someone figured out what caused this issue by itself or with support?

Regards,
Marcin

Mike Resseler
Product Manager
Posts: 5749
Liked: 613 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Federation related error when adding new organisation

Post by Mike Resseler » Oct 07, 2019 5:30 am

Hi Marcin,

First: Welcome to the forums.
Second: The previous case was closed with no response so we are not sure how it ended. If you have a O365 account and have this issue (and it is not a federated account), please create a support call also. Without diving in the logs it is rather impossible to figure out where the error is coming from

As per forum rules, please post your case ID here, and the outcome after investigation of our engineers.

Thanks
Mike

marcin baran
Novice
Posts: 3
Liked: never
Joined: Oct 04, 2019 1:10 pm
Full Name: Marcin Baran
Contact:

Re: Federation related error when adding new organisation

Post by marcin baran » Oct 09, 2019 7:46 am

Hello,

I didn't inquire what type of account was it - it might be federated account.
So veeam needs account created directly in Azure AD?
On-premise AD account that log in to office365 using Federation Services or synchronized with Directory Connect are unable to add organization in VBO365 console?

Regards,
Marcin

Mike Resseler
Product Manager
Posts: 5749
Liked: 613 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Federation related error when adding new organisation

Post by Mike Resseler » Oct 09, 2019 11:02 am

Hi Marcin,

Correct. The reason is rather simple. We connect to Azure AD, and if we would be able to talk to a federated account, it means that we need credentials / access to your on-premises environment also. It is rather a security risk. Plus, it remains smarter to use a AAD account specifically for this service, because no matter what happens, at least it can not be used to do something to your on-prem environment. I hope it makes sense

marcin baran
Novice
Posts: 3
Liked: never
Joined: Oct 04, 2019 1:10 pm
Full Name: Marcin Baran
Contact:

Re: Federation related error when adding new organisation

Post by marcin baran » Oct 10, 2019 12:41 pm

OK, I understand.
Thank you for your help.

Regards,
Marcin

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests