Entra ID security policies prevent CodeTwo Backup from connecting to SharePoint Online

This article is obsolete and may relate only to older versions of our software.

Problem:

After enabling Security defaults in Microsoft Entra ID (Azure Active Directory), you are unable to configure a connection to SharePoint Online (Microsoft 365) in CodeTwo Backup. You receive the following or similar errors:

Failed to connect to SharePoint by using legacy authentication.

Failed to read the list of team sites from the server. 

The request failed. The remote server returned an error: 401 Unauthorized.

Cannot contact web site '' or the web site does not support SharePoint Online credentials. The response status code is 'Unauthorized'.

Failed to connect to SharePoint. Identity Client Runtime Library (IDCRL) did not get a response from the Login server.

Solution:

If you experience this problem, it probably means that legacy authentication protocols are disabled in your Microsoft 365 tenant. These protocols were permanently retired in SharePoint Online on May 1, 2026.

CodeTwo Backup uses Modern Authentication (OAuth 2.0) to connect to Exchange Online and SharePoint Online. If you still have connections based on legacy Basic Authentication defined in the program, reconfigure them as shown here to continue backing up your data.

How to disable security detaults

To disable Security defaults in Entra ID and allow CodeTwo Backup connect to SharePoint Online using Basic Authentication, follow the steps below.

1. Open the Microsoft Entra admin center.
2. In the left-hand menu, go to Azure Active Directory (or Entra ID or Identity) > Overview, click the Properties tab and the Manage Security defaults link (see Fig. 1.).
3. Set the Security defaults option to Disabled, choose a reason for disabling Security defaults, and click Save (Fig. 1.).

Fig. 1. Disabling Security defaults in Microsoft Entra ID.

Now, you should be able to successfully complete the SharePoint connection wizard in CodeTwo Backup.

If you are still unable to connect to your SharePoint Online environment despite disabling Security defaults, verify and change the authentication related settings for your SharePoint environment, as explained below.

Enabling access to SharePoint Online resources using non-modern authentication protocols

Non-modern (legacy) authentication protocols might be disabled in your SharePoint Online environment. You can enable them by setting the -AllowLegacyAuthProtocolsEnabledSetting and LegacyAuthProtocolsEnabled parameters to True.

It is also recommended to set the RequireAcceptingAccountMatchInvitedAccount parameter to False, which removes the requirement for external users to sign in using the same account to which sharing invitations are sent. When enabled, this feature may also be preventing CodeTwo software from connecting to your resources.

Read on to find out how to make the necessary changes to these parameters by using SharePoint Online Management Shell. If you prefer to make the changes directly in the SharePoint admin center, see this article for instructions:

1. Open the SharePoint Online Management Shell command prompt.
2. Connect to your SharePoint Online by using the following command:

   Connect-SPOService -Url https://<organization>-admin.sharepoint.com

   where <organization> is the organization (tenant) name set in Office 365.

3. Run the following cmdlets:

   Set-SPOTenant -AllowLegacyAuthProtocolsEnabledSetting $True​
   Set-SPOTenant -LegacyAuthProtocolsEnabled $True 
   Set-SPOTenant -RequireAcceptingAccountMatchInvitedAccount $False

Checking if sign-in attempts were successful

The Microsoft Entra admin center allows you to check if users’ attempts to sign-in to Microsoft 365 were successful. Importantly, this feature also provides information on why an attempt was unsuccessful, which may be useful for troubleshooting. Any sign-in attempts made by CodeTwo Backup will also be displayed on the list.

To open the sign-in list:

1. Open the Microsoft Entra admin center.
2. Go to Azure Active Directory (or Entra ID or Identity) > Users > All users > Sign-in logs.

A table containing detailed information on all sign-in attempts will be displayed (Fig. 2.).

Fig. 2. A failed sign-in attempt made by CodeTwo Backup.