Maintain control of your Microsoft Office 365 email data
postmaal
Influencer
Posts: 16
Liked: 2 times
Joined: Jun 28, 2016 3:21 pm
Contact:

Veeam for Office 365 and Two Factor?

Post by postmaal » Oct 13, 2016 8:13 pm

We currently use two factor for Office 365. If I turn two factor off I am able to use my credentials to continue setting it up. If I try and use my regular login credentials, I cannot get past Connect to EWS, If I use an app password I get past Connect to EWS but fail connecting to powershell as "App Passwords are not available for use with PowerShell access to Office 365". Any suggestions?

Thanks,

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Oct 14, 2016 5:02 am

Hi,

Can you create a special user that doesn't need to use two factor authentication? Like a global user that will be used for this solution?

Mike

postmaal
Influencer
Posts: 16
Liked: 2 times
Joined: Jun 28, 2016 3:21 pm
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by postmaal » Oct 14, 2016 12:51 pm

Thanks for the suggestion Mike,

We do use a non two-factor user for powershell as Microsoft, to the best of my knowledge, doesn't allow multi-factor auth with power shell sessions. Since it appears veeam leverages powershell to connect to 365 I'm going to have to use that same user for the backups. I don't like it but I can live with it and rely on a strict password. I'm beginning to realize this isn't a veeam issue but instead of Microsoft one. It does seem backwards to me that the powershell admin user (one who has access to everything) isn't allowed multi-factor authentication. I also don't like giving up such passwords to 3rd party applications.

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Oct 14, 2016 7:41 pm

Hi,

I can understand, but as you said yourself... This is something we can't control. Please let us know if this works. From our side, we will ask (but not for v1 anymore) Microsoft to see if this is something that can be solved.
For your information, your password and user is stored encrypted in our solution.

Cheers
Mike

postmaal
Influencer
Posts: 16
Liked: 2 times
Joined: Jun 28, 2016 3:21 pm
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by postmaal » Oct 17, 2016 1:30 pm 1 person likes this post

I was able to set it up with a non two-factor user. Overall fairly impressed playing around with the beta. Looking forward to the release.

Thanks,
Alex

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Oct 17, 2016 4:03 pm

Hi Alex,

Thanks for coming back to us. Appreciated!

Mike

mcz
Expert
Posts: 211
Liked: 26 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by mcz » Jun 08, 2017 12:58 pm

Mike Resseler wrote:From our side, we will ask (but not for v1 anymore) Microsoft to see if this is something that can be solved.
Mike, have you been able to contact Microsoft, what did they say? We have the same situation here that we would like to enable MFA but of course this would break our backup solution...

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Jun 12, 2017 5:19 am

Hi Michael,

I never received reaction on my request but non-officially I was informed that this is not on the roadmap for them.

Sorry
Mike

mcz
Expert
Posts: 211
Liked: 26 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by mcz » Jun 14, 2017 8:25 am

Honestly I am surprised that Microsoft doesn't care about this topic because you will never be able to use MFA for this specific user - we are talking about security.

Anyway, thank you for this information and I will try to run veeam backup with a seperate user.

mcz
Expert
Posts: 211
Liked: 26 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by mcz » Jun 22, 2017 12:50 pm

surprise, surprise. Switched on MFA for the admin and realized that powershell doesn't work anymore - it tells you "access denied" and using the app-password bringts you the message "app-password not allowed using powershell".
I found an article about powershell & MFA - so Microsoft supports MFA & powershell:

https://technet.microsoft.com/en-us/lib ... .160).aspx

Now I think that you can start to implement powershell & MFA in veeam??

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Jun 22, 2017 2:13 pm

Thanks for the information, it looks like some things recently have changed in that document. We will certainly investigate, but I am not going to make any promises at this moment.

mcz
Expert
Posts: 211
Liked: 26 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by mcz » Jun 26, 2017 7:14 am

Yeah Mike of course, I know that any promises will be difficult and maybe unrealistic. But it would be nice to hear anything from you when it has been decided if it will be implementet in future releases. Thank you!

Mike Resseler
Veeam Software
Posts: 4641
Liked: 497 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by Mike Resseler » Jun 27, 2017 4:57 am 1 person likes this post

Understood. I can say one thing for certain (unfortunately), the next minor version (1.5) won't support this as we are already in feature lock. But we will discuss it for our next major version

boris.bahes
Lurker
Posts: 1
Liked: never
Joined: Jul 18, 2017 9:42 am
Full Name: Boris Bahes
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by boris.bahes » Jul 18, 2017 9:52 am

Mike Resseler wrote:Understood. I can say one thing for certain (unfortunately), the next minor version (1.5) won't support this as we are already in feature lock. But we will discuss it for our next major version
Discuss it? Seriously? I expect from Veeam, something like, Q4 2017 or Q1 2018.

mcz
Expert
Posts: 211
Liked: 26 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Contact:

Re: Veeam for Office 365 and Two Factor?

Post by mcz » Oct 11, 2017 8:22 am

Mike Resseler wrote:Understood. I can say one thing for certain (unfortunately), the next minor version (1.5) won't support this as we are already in feature lock. But we will discuss it for our next major version
Mike, now since version 1.5 is available I guess the roadmap for the next release has been already discussed. Are there any news regarding MFA?

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests