Adopting Best Security Configuration for Providing Access to Azure AD Tenant

Security Requirements

All app registrations must:

• Use the Federated Identity Credentials (FIC)–based authentication mechanism.

• Have appropriate Conditional Access policies configured and enforced.

The express configuration uses Commvault Cloud-hosted multi-tenant apps. These apps use Federated Identity Credentials (FIC) authentication mechanism and do not require app secrets or certificates.

Multi-tenant apps provide a better security posture and are the recommended authentication method from Microsoft.

If you are an existing customer and notice one of the following messages, follow the recommended steps to resolve the issue:

1. A notification in the configuration page related to authentication or app permissions (Conditional access policy check failed with exception: Access denied: Missing required permission (Policy.Read.All)
2. A "security update" notification on the overview dashboard page of Azure Active Directory

Choose Your Migration Path

Select the appropriate guide based on your current configuration:

• Update single tenant apps security configuration