Maintain control of your Microsoft Office 365 email data
Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Oct 16, 2018 7:44 am

Travis,

Please make a support call for this. I believe I heard about this before and if I am right, our support team can get you fixed. (And as always, please post the case ID here and the outcome after investigation with the engineers)

Thanks
Mike

thuizenga
Influencer
Posts: 22
Liked: never
Joined: May 08, 2010 2:00 am
Full Name: Travis h
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by thuizenga » Oct 16, 2018 4:09 pm

we got it to work by enabling legacy protocols for the newly created user.

connect-sposervice
set-spotenant -legacyauthprotocolsenabled $true
set-spotenant -requireacceptingaccountmatchinvitedaccount $false

Yeah!

Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Oct 17, 2018 7:35 am

Thanks Travis.

I will need to look into these PS cmdlets to truly understand what is going on in the backend. I'm not sure to be honest why it needs to be done (I actually thought this was enabled by default...)

stvajnkf
Enthusiast
Posts: 44
Liked: 13 times
Joined: Jan 03, 2017 5:25 pm
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by stvajnkf » Nov 12, 2018 9:05 pm

As of version 2.0.0.567 and 11/12/2018, two-factor authentication is still not working for the main service account that lets Veeam connect to the Office 365 server. It fails when it tries to connect to Microsoft Graph, preventing me from going any further with the backup job setup.

Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Nov 13, 2018 8:57 am 1 person likes this post

@Stvajnkf,

Our next version will have MFA support and will work with app secrets. I can't give any ETA at this point in time though

jrick
Service Provider
Posts: 21
Liked: 1 time
Joined: Jan 31, 2018 9:31 am
Full Name: Julien Rick
Location: Luxembourg
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by jrick » Jan 10, 2019 11:21 am

Any news about VBO365 and MFA ? My mail team explained me that Microsoft will force MFA for administrators in February and VBO365 need an account with Sharepoint Admin right.

Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Jan 10, 2019 1:06 pm

Hey Julien,

Can you ask your team where they have found that? I am aware that the default will become MFA-enabled but it is still changeable at your own discretion and if it is not MFA enabled today, it won't be then.

But maybe I missed somewhere an announcement?

Thanks
Mike

DannyMurphy
Influencer
Posts: 13
Liked: never
Joined: Nov 01, 2017 1:24 pm
Full Name: Danny Murphy
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by DannyMurphy » Jan 21, 2019 4:12 pm

Hi Mike,

The enforcement comes from Partner Centre. It gives this link to a PDF to see whats changing and why: http://assetsprod.microsoft.com/securit ... ts-faq.pdf

It'll affect the APIs for partner centre but i don't believe Veeam uses these so it shouldn't affect it. They are however forcing it for all admins soon after according to the Azure which you can see on this link: https://aka.ms/cabaselinemfaforadmins

Polina
Veeam Software
Posts: 598
Liked: 88 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Polina » Jan 23, 2019 10:43 am

Hi Danny,

Thanks for the info.
First and foremost, we clearly realize the need and urgency for introducing support for MFA-enabled accounts in VBO, and it's already on our roadmap.
Still, the transition to the new baseline policy should be smooth, as Microsoft provides a temporary workaround allowing to exclude users from the policy.

Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Jan 29, 2019 7:03 am 1 person likes this post

Danny,

To add to what Polina says. MFA-enabled accounts (or better said, modern authentication) will be available in our next version and that is not far away anymore. And as Polina says, there is a workaround. But the one change I would like to make, is that it most likely won't be a temporary workaround. MSFT actually advises to have an "emergency access" acount (https://docs.microsoft.com/en-us/azure/ ... ncy-access).

But for the future, we will indeed advise everyone to use a modern authentication "service account" that will include app ID, app passwords or certificates and more. We are already prepping the documentation for it (Polina is ;-))

DannyMurphy
Influencer
Posts: 13
Liked: never
Joined: Nov 01, 2017 1:24 pm
Full Name: Danny Murphy
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by DannyMurphy » Jan 31, 2019 11:57 am

Perfect, looking forward to it!

Hopefully the update after this one will bring it into B&R :P

Mike Resseler
Product Manager
Posts: 5457
Liked: 574 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Mike Resseler » Jan 31, 2019 12:13 pm

Hey Danny,

What exactly do you mean with "bringing it into B&R"? For example, bringing it into the UI of B&R does not make any sense to me. Other items might make sense though.

DannyMurphy
Influencer
Posts: 13
Liked: never
Joined: Nov 01, 2017 1:24 pm
Full Name: Danny Murphy
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by DannyMurphy » Feb 01, 2019 9:19 am

Yeah bring it into the UI. One single console for backup infrastructure and one installation, multiple licenses. Makes life easier for service providers :)

Polina
Veeam Software
Posts: 598
Liked: 88 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Microsoft will force MFA for all Global Admins in O365 soon

Post by Polina » Feb 01, 2019 9:58 am

Hi Danny,

From what I've heard it might be implemented in the future (never say never with Veeam :) ). But as of now isn't Veeam Availability Console meeting the need for a single backup management console?

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests