Keepit for Azure AD / Entra ID

If Entra ID goes down, everything goes down. Every Microsoft 365 application, every connected SaaS tool, every Conditional Access policy, every user identity — all of it depends on your directory being healthy and available. Microsoft's native recycle bin retains deleted objects for just 30 days, and there is no built-in mechanism to recover complex configurations like Conditional Access policies, Intune profiles, or PIM role assignments once they are gone.

Keepit for Entra ID provides deep, granular backup of your identity infrastructure. Beyond users and groups, it captures the configuration objects that actually run your organisation day-to-day. Conditional Access policies, Intune device compliance profiles, BitLocker recovery keys, Windows LAPS credentials, app registrations, enterprise apps, and Privileged Identity Management settings are all backed up automatically.

The cross-tenant restore capability is where this product truly shines for disaster recovery planning. If your primary tenant is compromised — say, by a sophisticated phishing attack that gains Global Admin access — you can restore your entire Entra ID configuration into a clean secondary tenant. Object relationships and dependencies are maintained automatically, so you are not manually rebuilding from spreadsheets. Anomaly detection dashboards monitor for unusual deletion patterns and alert administrators to potential breaches before they escalate.