If you are all set to back up your Microsoft Entra ID tenant’s data, you can head over to the Druva Cloud Platform Console and configure a backup.
There are two parts to Microsoft Entra ID backup.
Part 1: Install the Druva Entra ID app on Microsoft Entra ID to register your tenant.
On the Druva Cloud Platform Console, click the hamburger button on the top left > All Services > Microsoft Entra ID.
Or, you can select Microsoft Entra ID under data protection.
If you are navigating to the Microsoft Entra ID screen for the first time, you see this message:
Contact support to enable support for Microsoft Entra ID in your account. When Druva Support enables it for you, you can see this screen:
On the Get Started with Microsoft Entra ID protection page, click Install. It takes you to Microsoft’s page where you provide the credentials that can install the Druva Entra ID app.
Click Accept on the next page. Druva needs these permissions to back up and restore data from your Microsoft Entra ID tenant.
When your Microsoft Entra ID tenant is registered with Druva, the setup brings you back to Druva Cloud Platform Entra Id dashboard. If Cloud Key Management is not enabled, Druva asks you to enable it.
Configure Cloud Key Management (KMS). After authentication, the Cloud Key Management configuration wizard appears.
Scheduled Backup of SaaS Apps data requires access to the data encryption key to encrypt backed-up data. This process is part of the digital envelope encryption process that Druva strictly adheres to. Druva does not store the user’s data encryption key and has no access to the data. Select one of the following options to generate the data encryption key.
Cloud Key Management System (KMS) (recommended) - Uses AWS KMS services to encrypt and decrypt SaaS Apps data. You cannot disable this setting once saved. For more information, see Configure Key Management.
Bring Your Own Key (BYOK) - If your organizational policies require complete control over the encryption of the data backed up by Druva, Enterprise Key Management is the solution for you. For more information, see Enterprise Key Management.
If Cloud Key Management is already enabled for your account, you can see the discovered objects screen.
If you have come this far, then you have successfully completed part 1. You can now configure backup settings for your tenant. Druva will back up your data based on your configuration.
Part 2: Configure the backup
On the Discovered Entra ID Objects screen, click Configure Now.
On the dialog that appears, specify:
Storage Region: Where Druva stores snapshots of your data. Currently, you can select any inSync Cloud storage region that is configured for you except GovCloud regions for Microsoft Entra ID backups.
❗️Note: You cannot change this region after the first backup. You can only choose from the options that are available to you. If only one region is configured for your account, then it is selected for you at this step and you cannot change it. If you want to choose another region to store your snapshots, contact support to get another storage region configured for you.
Backup Frequency: How often you want Druva to back up your data. You can choose: Once a day, Twice a day, Once a week, Twice a week, or Thrice a week.
Retention: Right now, Druva stores all the snapshots forever.
Review all your settings and click Save.
You have successfully configured backup for your account at this step. Druva runs the backup based on the settings and creates a snapshot of your Microsoft Entra ID objects.
Run a backup manually
If you could install the app and configure a backup, you can see that the Microsoft Entra ID overview page changes (and you can also see a Jobs page now).
You can find more information about this page on its dedicated documentation article, but this is also the place that provides the Backup Now button. Use the Backup Now button if you want to run a backup yourself and don’t want to wait for Druva to run a scheduled backup.
When you run a backup manually (or when Druva runs a scheduled backup), Druva creates a backup job. You can go to the jobs page to see more details on it.
To learn more about the data that Druva can protect, see Microsoft Entra ID data that Druva protects.