Cross-Tenant OD4B -> OD4B Migration With Modern Auth. MigrationWiz Won't Work - SPO PS?

[Deleted]

Hi,

We've acquired a company who also has an O365 Tenant.  I've had a great experience using BitTitan MigrationWiz to migrate the mailboxes over.  It was a dream and I highly recommend it.

Phase II was to perform a document migration, and the process was that all source users would move everything into their OD4B, and I would use the doc migration component of MigrationWiz to forklift all data out and over into their new OD4B sites in our tenant.  MigrationWiz supports this migration.

However.

In our (the 'destination') tenant we have implemented Modern Authentication & Conditional Access Policies, along with some MFA.  I got rid of the MFA for the migration acct, and excluded it from the Conditional Access Policies.  When I tried the pilot migration I got the below error:

Your migration failed checking destination credentials. Cannot contact web site 'https://TENANTNAME-admin.sharepoint.com/' or the web site does not support SharePoint Online credentials. The response status code is 'Unauthorized'. The response headers are 'Content-Type=text/plain; charset=utf-8, P3P=CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI", X-SharePointHealthScore=3, X-MSDAVEXT_Error=917656; Access+denied.+Before+opening+files+in+this+location%2c+you+must+first+browse+to+the+web+site+and+select+the+option+to+login+automatically., SPRequestDuration=27, SPIisLatency=4, X-Powered-By=ASP.NET, MicrosoftSharePointTeamServices=16.0.0.7716, X-Content-Type-Options=nosniff, X-MS-InvokeApp=1; RequireReadOnly, X-MSEdge-Ref=Ref A: A023B5802BE4460D83753583C1F81C92 Ref B: BL2EDGE0918 Ref C: 2018-05-30T18:36:12Z, Date=Wed, 30 May 2018 18:36:11 GMT, Content-Length=0'.

BitTitan told me that this is because their tool only supports Set-SPOTenant -LegacyAuthProtocolsEnabled $True

Part of our ModernAuth config sets that to $false.

Is the only way to use this tool and complete the OD4B migration to reset the tenantwide 'legacyauthprotocols' setting to '$true'?

Otherwise, can SPO PS be used to connect to other tenants with appropriate creds, iterate through a source user's OneDrive files/folders, connect to the target tenant with separate creds and populate a corresponding OneDrive with that data?  We only have about 40 users and I can use a CSV for source/target.

This is a tough one.

Thanks,

John

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_manage/connect-sposervice-...

[#2]

Well, you might need to ask this to BitTitan support and if there are not other alternatives you might need to use another tool for the migration

[#3]

Not the most helpful reply, esp since if you had read my OP you'd have seen:
"BitTitan told me that this is because their tool only supports "-LegacyAuthProtocolsEnabled $True".

[#4]

If changing that setting in your tenant is not possible (for whatever reason you have), then you can (as you say) create your custom PowerShell scripts to move files from one tenant to another one...another alternative you have is just change your migration tool (Sharegate, Metalogix) and see if they deal better with your scenario.