How can end users recover their own Microsoft 365 data through Microsoft OAuth Login?


CubeBackup administrators/operators can backup or restore data for any users in the Microsoft 365 organization. However, it is often advantageous, especially in large organizations, to allow end users to individually find and recover Microsoft 365 files or emails by themselves.

Enable self-service recovery for Microsoft 365 backups

Please follow the instructions below to enable Microsoft OAuth login for all users in your Microsoft 365 organization, so that end users can restore their Microsoft 365 data without asking for the administrator:

  1. Log (or SSH) into your backup server.
  2. Open the configuration file <installation directory>\etc\config.toml on the backup server using a text editor.

    On Windows, the default installation directory is located at C:\Program Files\CubeBackup365.
    On Linux, the default installation directory is located at /opt/cubebackup365.

  3. In the [Web] section and change the value of EnableOAuthLogin to true. If your config.toml file doesn't contain a EnableOAuthLogin line, you will need to create one.

    [Web]
    ...
    EnableOAuthLogin = true
    ...
  4. Restart the CubeBackup service using the following command.

    Please run this command.

    sudo /opt/cubebackup365/bin/cbsrv restart

    Open a Command Prompt as Administrator, and run this command.

    "C:\Program Files\CubeBackup365\bin\cbsrv.exe" restart

    Open the Windows PowerShell as Administrator, and run this command.

    & "C:\Program Files\CubeBackup365\bin\cbsrv.exe" restart

    Please run this command to restart the container.

    sudo docker restart <container-name>

Share the CubeBackup portal URL with end users

  1. The login page for individual users is accessible at: <domain name/IP>/userlogin (e.g. http://127.0.0.1/userlogin or https://backup.domainname.com/userlogin).

    Please ensure that you log out of the admin account before testing the user login page.

  2. You can share this login URL with end users so they can sign in with their Microsoft work or school accounts, view their backup files and emails and perform a self-service recovery of their Microsoft 365 data.

    For detailed instructions, please refer to Basic operation guide for Microsoft OAuth end users in CubeBackup.

    NOTE: Make sure the first full backup for your Microsoft 365 organization is complete before notifying users about the CubeBackup portal. Otherwise, users will not be able to view any backup data.