Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Cohesity Alta SaaS Protection Administrator's Guide
  3. Protect Entra ID objects
  4. Setting up Entra ID protection with Cohesity Alta SaaS Protection
Cohesity Alta SaaS Protection Administrator's Guide

Setting up Entra ID protection with Cohesity Alta SaaS Protection

To protect your Entra ID environment using Cohesity Alta SaaS Protection, you need to add and set up a Cohesity Alta SaaS Protection Entra ID connector based on your backup requirements.

Before you begin:

You must know the following before adding a connector:

  • The following items are supported for backup and restore:

    • Users: It includes backing up the user-related data such as profiles, settings, permissions, and other user-specific information.

    • Groups: It includes backing up the structure, memberships, and settings associated with the groups.

    • Application Registrations: It includes backing up the configurations, settings, and information associated with applications registered within the Entra ID environment.

    • Enterprises Applications: It includes backing up the configurations, settings, and data associated with enterprise-level applications registered and used within the Entra ID environment.

  • The following items/scenarios are not supported for backup and restore:

    • Backup and restore of passwords and multifactor authentication are not supported due to Graph API limitations.

    • Restore of multifactor authentication for the permanently deleted users is not supported.

    • Backup and restore of Application Registrations and Enterprise Applications' secrets are not supported.

    • Restore of Distribution Lists or Mail-enabled security groups is not supported.

    • Restore of eligible assignments and assignments with expired dates is not supported due to Graph API limits.

    • Backup and restore of photos or logos are not supported.

    • Only cloud-native attributes are restored for on-premises synchronized objects.

    • To perform restore of an Enterprise Application, its corresponding Application Registration should be restored first.

    • Restore of Enterprise Application for which the corresponding Application Registration is permanently deleted is not supported.

Step-by-step procedure to add a Microsoft Entra ID connector:

Each tab in the connector creation workflow includes a help icon (?) on the left. Click this icon to open the corresponding help topic for that tab, which guides you through the setup process step by step.

Procedure:

  1. Access the Administration portal and select the connector type.
    • Access the Administration portal.

    • Click Connectors on the Backup card.

    • Click New backup connector.

    • Click Microsoft Entra ID.

      Do any of the following:

      • Play the video that guides you through the Entra ID connector creation process. After the video ends, close the page. This action directs you to the New Connector page where you can proceed to create a connector.

      • Click Skip if you prefer not to watch the video. This action directs you to the New Connector page where you can proceed to create a connector.

      • Select the Don't show this again check box to avoid seeing this page when you create subsequent Entra ID connectors.

  2. On the General tab, set up the basic configuration for the connector.

    See Configure General settings.

  3. On the Capture scope tab, click Next.
  4. On the Credentials tab, configure credentials to access the source workloads (the SharePoint data to be backed up) and click Next.

    See Configure credentials.

  5. On the Scheduling tab, schedule when the backup job should run.

    See Schedule a backup.

  6. On the Email notifications tab, configure email addresses to receive notifications about backup activities.

    See Configure email addresses to get notifications.

  7. On the Review tab, save the settings and initiate the backup.

    See Review configuration and edit/save/initiate backup.

Related topics:
  • See Connector status.

  • See Perform on-demand/ad-hoc backup.

  • See Video tutorial for connector troubleshooting.

  • See About Entra ID (Azure AD) objects and records restore .

Feedback

Was this page helpful?
Previous

Protect Entra ID objects

Next

Backup and restore limitations for Entra ID

Feedback

Was this page helpful?