We want to configure backups for Office 365 & AzureAD.
According to the documentation the most secure method currently available is by registering (multiple) apps which can be configured manually or automatically when using a global admin with temporary MFA disabled.
The only possible authentication method seems to be clients secrets which is better than service accounts for sure, but I wouldn’t call it the most secure method either.
Not sure if (Azure) conditional access can be applied to the app registrations.
Is there any other way possible, such as certificates or even managed identities ?
It seems Commvault has possibilities in that direction but only for Azure VM’s.
Kind regards,
Tom
Best answer by Chris Hollis
View original
