When attempting to login to the Veeam Backup for Microsoft 365 Restore Portal, the following error occurs:
The server has rejected the client credentials.
When configuring the "Enable restore operator authentication with Microsoft credentials" feature, a certificate was selected from the Certificate Store, or a certificate was imported. However, that certificate was not added to the Trusted Root Certification Authorities.
The application certificate within the Restore Portal settings has been updated, but it has not been added to the application settings of Microsoft Entra.
For Backup as a Service for Microsoft 365 usage scenarios, the tenant must ensure they've followed the configuration steps to ensure the correct permissions have been assigned for Restore Portal access.
Make sure that the certificate is added to the Trusted Root Certification Authorities.
Reference: Authentication Settings
If the certificate is updated within Veeam Backup for Microsoft 365, it must also be added in the application settings through the Microsoft Entra admin center.
Reference: Restore Portal Settings
Ensure that all steps provided in the Restore Portal Configuration for "On Tenant Side" have been completed correctly.
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case