Commvault announced identity resilience capabilities on October 28 that audit changes across Active Directory, Entra ID and Okta, map Tier 0 exposure and guide remediation.

According to the company’s release, the additions have three parts. Cross-provider identity auditing shows administrators changes to identities, permissions and the configurations that govern access across the three providers. Identity attack intelligence identifies an organization’s most privileged identity assets and who controls them, which Commvault calls a Tier 0 inventory. AI-guided recommendations explain why an exposure exists and how to address risky access, with rollback of unwanted changes and recovery of trusted identity configurations.

Commvault says identity attack intelligence and cross-provider identity auditing are planned for early access in the coming quarters, as part of its Commvault IDRecover portfolio. The release does not give a date for general availability.

The release cites a Strata survey figure that 80% of large enterprises use multiple identity providers. It also quotes IDC senior research analyst Emanuel Figueroa saying only 47% of organizations have a completed identity recovery plan. Both numbers come from the release and its footnote, and we have not verified them against the underlying studies.

The stage is the first fact for a buyer to weigh, because these are announced capabilities with early access still ahead. When early access opens, two checks separate a demo from a control. One is whether the Tier 0 inventory matches the privileged accounts your own team would list. The other is whether rollback covers a permission change made in one provider without disturbing the other two. Identity compromise is already a live problem on this beat, as in the token replay across 79 Microsoft 365 organizations and the Microsoft Authenticator token flaw.

Source: Commvault on PR Newswire