Knowledge Base

Add an Office 365 tenant to RecoveryManager Plus using an MFA enabled account

Problem

When you use a multi-factor authentication (MFA) enabled global admin account to add your Office 365 tenant with RecoveryManager Plus, using the password of the account during configuration will throw the following error.

Authentication failed.

In such cases, you’ll have to provide the app password of the MFA enabled account. However, the app password is displayed when you enable MFA for the first time and cannot be retrieved again.

configure-office-365-tenant-using-app-password1

If you do not have the app password, you’ll have to create a new app password.

Solution

This post will explain how you can create a new app password and use that to add the Office 365 tenant to RecoveryManager Plus.

To generate a new app password in Office 365, follow the steps listed below.

  • Log in to the Office 365 portal.
  • Select your name at the top right, and choose My account.

    configure-office-365-tenant-using-app-password2

  • Click Security & privacy → Additional security verification.

    configure-office-365-tenant-using-app-password3

  • Click Create and manage app passwords.

    configure-office-365-tenant-using-app-password4

  • In the App passwords page that appears, click create.

    configure-office-365-tenant-using-app-password5

  • Type a name for the app that needs the app password and click next.

    configure-office-365-tenant-using-app-password6

  • Click copy password to clipboard.

    configure-office-365-tenant-using-app-password7

The copied app password can now be used to add the tenant to RecoveryManager Plus.

  • Log in to RecoveryManager Plus as the administrator.
  • Navigate to Exchange tab → Configuration.
  • Select Office 365 in the Exchange Type drop-down.
  • Enter the account name and the copied app password in the Account Name and Password fields.
  • Choose the Azure environment in which the tenant was created from the drop-down box.
  • Global administrators must have appropriate impersonation rights to backup and restore Office 365 Exchange mailboxes. Select the Grant Impersonation checkbox to provide the global admin this privilege.

    Note: If this option is not selected, you can only backup and restore the mailbox of the global admin whose email address has been used to configure the tenant.

  • Click Save to add the tenant.

configure-office-365-tenant-using-app-password8

Couldn't find the feature you wanted? Raise a feature request
Need a full-fledged demonstration of the product? Request a personalized demo

 

Request Support

Need further assistance? Fill this form, and we'll contact you rightaway.

A single pane of glass for Active Directory, Azure Active Directory,
Microsoft 365, Google Workspace, and Exchange Backup.
  • » Personal WorkDrive backup
  • » Backup retention
  • » Incremental backup