Step 3. Select Authentication Method
At this step of the wizard, select either modern or basic authentication and specify authentication settings.
Modern Authentication
Modern authentication allows Veeam Backup for Microsoft 365 to use an Azure AD application for data restore. Such an application is used to restore the specified mailbox, folder or item back to Microsoft 365 organizations with enabled multi-factor authentication (MFA) and enabled or disabled security defaults. For more information, see the Adding Microsoft 365 Organizations section of the Veeam Backup for Microsoft 365 User Guide.
You can use modern authentication with either one-time authentication code or Azure AD application certificate.
Using Modern Authentication with One-Time Authentication Code
To use modern authentication with an one-time authentication code, do the following:
- From the Specify authentication method drop-down list, select Modern authentication (one-time password).
- From the Region drop-down list, select a region to which your Exchange Online organization belongs.
- In the Organization name field, enter a name of your Exchange Online organization.
Make sure that the organization name matches the name specified at the previous step of the wizard.
- In the Application ID field, enter an identification number of the Azure AD application that you want to use for data restore.
By default, Veeam Explorer for Microsoft Exchange populates this field with the identification number of the application that was used during a backup session. If you want to use another application, make sure to grant this application required permissions. For more information, see the Azure AD Application Permissions section of the Veeam Backup for Microsoft 365 User Guide.
Using Modern Authentication with Azure AD Application Certificate
To use modern authentication with the Azure AD application certificate, do the following:
- From the Specify authentication method drop-down list, select Modern authentication (certificate-based).
- From the Region drop-down list, select a region to which your Exchange Online organization belongs.
- In the Organization name field, enter a name of your Exchange Online organization.
Make sure that the organization name matches the name specified at the previous step of the wizard.
- In the Application ID field, enter an identification number of the Azure AD application that you want to use for data restore.
By default, Veeam Explorer for Microsoft Exchange populates this field with the identification number of the application that was used during a backup session. If you want to use another application, make sure to grant this application required permissions. For more information, see the Azure AD Application Permissions section of the Veeam Backup for Microsoft 365 User Guide.
- Click Select to specify an SSL certificate that you want to use for data exchange between Veeam Explorer for Microsoft Exchange and the specified Azure AD application.
- In the Select Certificate wizard, select a certificate. For more information, see Installing SSL Certificates.
To use basic authentication, do the following:
- From the Specify authentication method drop-down list, select Basic authentication.
- Enter credentials to connect to the Exchange organization.
Make sure that the account that you use has both the Exchange Administrator and the Global Administrator roles.
