Commvault has announced new identity resilience capabilities that will monitor changes across Active Directory, Microsoft Entra ID and Okta, identify an organization’s most privileged accounts and assets, and use artificial intelligence to suggest how to fix risks or undo unwanted changes. The company unveiled the capabilities on October 28, 2026, and plans to open them in early access over the coming quarters as part of Commvault IDRecover.
Commvault’s identity resilience in 20 seconds
- Commvault extends IDRecover to Active Directory, Entra ID and Okta with continuous change auditing.
- A Tier 0 inventory will show the most privileged identities and who controls them.
- AI will explain each exposure and allow changes to be reversed; early access arrives in the coming quarters, with no set date or price.
The announcement rests on the idea that controlling a handful of privileged identities is enough to dominate the rest of a company’s systems. Pranay Ahlawat, Commvault’s chief technology and AI officer, sums it up this way: “Attackers don’t need to compromise every system. They only need to compromise the identities that control them.” The company’s pitch is to treat directories and identity providers as something that also needs to be auditable and recoverable, just like data.
Three capabilities to see and recover the directory
Commvault groups the new features into three blocks. Cross-provider auditing continuously logs changes to identities, permissions and the configurations that govern access, with a common view across Active Directory, Entra ID and Okta. Identity attack intelligence looks for the most privileged assets, so-called Tier 0, and who has control over them. According to the company, that inventory can surface risks that go unnoticed today.
| Capability | What it does, according to Commvault | Status |
|---|---|---|
| Cross-provider identity auditing | Continuously monitors changes to identities, permissions and access configurations across Active Directory, Entra ID and Okta | Early access expected in the coming quarters |
| Identity attack intelligence | Locates the most privileged identity assets and who controls them, generating a Tier 0 inventory | Early access expected in the coming quarters |
| AI-guided remediation and recovery | Explains why an exposure exists and how to resolve it; allows reverting changes and recovering trusted configurations | No specific date given in the announcement |
The third block is AI-guided remediation: the system recommends how to act on a risky access path and explains why that exposure exists. The tool also lets teams revert unwanted changes and return to an identity configuration considered trustworthy, which is the part that ties back into Commvault’s traditional backup and recovery business.
Why having several identity providers matters
The announcement cites a 2025 Strata study according to which 80% of large enterprises use multiple identity providers, including Active Directory, Entra ID and Okta. Each one has its own console and its own logs, so tracking a permission change that affects all three isn’t straightforward. Emanuel Figueroa, senior analyst for identity and access security at IDC, offers another figure cited in the announcement: only 47% of organizations have completed an identity recovery plan, even though identity threat detection and response ranks as their top priority and resilience as the next one. The announcement does not provide further detail on the IDC study the figure comes from.
Figueroa notes that “access controls alone cannot return a directory to a verified state,” and argues that recovery is becoming a differentiating purchase criterion. According to the analyst, Commvault’s expansion to these three platforms shows that data protection vendors are moving to cover that need.
What’s already here and what’s still coming
Commvault had already been strengthening identity recovery. In September, Cloud News covered how Commvault prepares a standby Active Directory to recover identities in minutes, and in October how it protects the work AI agents leave behind on laptops. What’s being announced now extends that approach to Entra ID and Okta and adds a layer of visibility ahead of any incident.
The features are not yet available. Commvault speaks of early access “in the coming quarters” for cross-provider auditing and attack intelligence, gives no specific date or pricing, and will present the announcement at its SHIFT 2026 event in Nashville. Until customers are actually using them, the real scope of the detection and of the automated recovery is whatever the company itself describes.
Frequently asked questions
What has Commvault announced?
New identity resilience capabilities for Active Directory, Entra ID and Okta: continuous change auditing, a Tier 0 identity inventory, and AI-guided remediation and recovery.
When will they be available?
Commvault plans to open early access in the coming quarters, with no specific date given.
Which product will include them?
They will be offered as part of Commvault IDRecover.
What is Tier 0 in identity security?
It refers to an organization’s most privileged identity assets. Commvault’s inventory will also show who controls them.
Sources:
This article is also available in Spanish: «Commvault vigilará Active Directory, Entra ID y Okta para recuperar identidades», on revistacloud.com.
