vambris
Talk to us

Backup and recovery for Microsoft Entra External ID

EIDGuard gives your customer identity tenant versioned recovery points, daily drift checks and dependency-aware restores. It runs in your Azure subscription, not ours.

Talk to us Read the docs
EIDGuard · Overview
EIDGuard Overview for a demo deployment: two of two Contoso tenants protected within their recovery point objective, four certificates in date, both tenants verified against the live directory in the last 24 hours, and a 30-day backup reliability calendar.

Microsoft keeps External ID running. It keeps no copy of your configuration you can restore. Most objects are hard-deleted the moment they are removed, and an edited policy has no earlier version to go back to.

What Microsoft's recycle bin covers

A full recovery point on every run

Each backup is a complete, versioned export of 29 resource types, stored in your Blob Storage and locked against deletion.

Backup in detail
EIDGuard · Recovery points
EIDGuard Recovery points page: scheduled and manual recovery points for two Contoso tenants, each with its creation time, age, object count, and Differential and Restore actions.

See every property that changed

A daily comparison with the live tenant shows what was added, modified or deleted, with both values side by side.

Drift detection in detail
EIDGuard · Drift
EIDGuard drift report comparing a recovery point with the live tenant: one added, seven modified and two deleted objects. Rows include a Conditional Access policy whose state went from enabled to disabled, a user flow that lost an identity provider, and the Apple identity provider missing from the live tenant.

Preview first, then restore in dependency order

Bring back one user flow or a whole tenant. References are remapped, and nothing is written until you approve the preview.

Recovery in detail
EIDGuard · Restore, Scope
EIDGuard restore wizard on the Scope step for a recovery point of the contosocustomers tenant: UserFlowAttributes, IdentityProviders, UserFlows and ConditionalAccess are selected from a list of resource types, each with its object count.

Pick the resource types to bring back from a recovery point.

EIDGuard · Restore, Mode
EIDGuard restore wizard on the Mode step: Missing only recreates objects that no longer exist; Full (disaster recovery) also overwrites existing objects and needs the Admin role. A note says the next step is a preview run that changes nothing.

Missing only recreates what is gone. Full also overwrites what exists.

EIDGuard · Restore, Review
EIDGuard restore wizard on the Review step: a Missing only preview lists nine existing objects it keeps, including two Conditional Access policies, a named location and two user flows, each marked Skipped. A note says objects not listed will be created if they are missing.

A preview run against the live tenant. Nothing is written yet.

Runs in your subscription. Vambris never sees your tenant.

Backups are read-only, recovery points are locked against deletion, and the only call home is a license check with no tenant data in it.

Your External ID tenants

Read for every backup. Changed only by a restore you approve.

Microsoft Graph

Your Azure subscription

EIDGuard

Deployed into a resource group you own

License check

vambris

Priced by the tenants you protect

Every plan includes every capability, billed monthly through Azure.

Starter

$199per month

Up to 3 protected tenants

Talk to us

Standard

$299per month

Up to 5 protected tenants

Talk to us

Enterprise

Private offer

Unlimited protected tenants

Talk to sales

Azure resources in your subscription are billed separately by Microsoft, including the App Service plan at about $13 a month.

Deployed from the Azure Marketplace. Set up in the browser.

About 20 minutes from deployment to your first recovery point. No scripts, no command line.

Talk to us Getting started