In short: Keepit for Okta is a backup service that copies Okta users, groups, applications, policies, network zones, authenticators and identity providers into Keepit's immutable cloud. Okta does not offer native backup and restore, so Keepit fills that gap. It is licensed per seat, counted from your onboarding and active Okta users.
Why back up Okta
If Okta is your identity provider, it decides who can reach every application connected to it. A deleted group, a broken application assignment or a changed sign-on policy can lock out a department, and rebuilding complex configuration by hand takes time you do not have during an incident. Keepit points out that Okta has no native backup and restore, and no native recovery path after configuration loss, user deletion or policy changes.
Keepit for Okta captures your Okta configuration and identity data automatically and keeps it in Keepit's own cloud, outside Okta, where it cannot be altered or deleted.
What is covered
| Area | Included |
|---|---|
| Identity and access | Users, groups with their members, authenticators, identity providers and attribute mappings |
| Applications | Application definitions, assigned users and groups, schemas, grants, SAML metadata, provisioning settings, clients, client keys and secrets, and API service integrations |
| Security | Policies with their rules and group and application relations, network zones and enabled factors |
| Platform | Organisation settings, administration roles and resources, rate limit settings, user lockout, authentication and CAPTCHA settings |
Keepit marks several items as backup only, including enabled factors, authenticators, identity providers, attribute mappings, SAML metadata, SMS templates and some organisation settings. These are kept for reference and comparison rather than restored automatically. In January 2026 Keepit expanded Okta recovery to cover users, groups, applications, policies, security settings, role assignments, custom roles and network zones.
Restore options
- Restore individual records, such as one user or one application, in a few clicks
- Restore whole application datasets
- Restore an entire snapshot after a ransomware or insider incident
- Search, preview and share data securely without restoring it
Because Keepit keeps a history of snapshots, you can also see what a policy or application looked like before it was changed, which helps with investigations and audit questions.
How it is licensed
Keepit for Okta is licensed per seat. Keepit counts licensed Okta users in onboarding and active states as seats: users who are staged, provisioned and awaiting activation, active, in password reset, with an expired password, or locked out. Storage is unlimited, and retention can be configured up to the limit of your tier.
Retention follows the tier: up to 5 years on Core Continuity, up to 10 years on Business Resilience or Enterprise Resilience, and unlimited retention as an add-on to those two. The Keepit overview compares support and onboarding across the tiers. Okta can be bought on its own, or bundled with other Keepit services such as Keepit for Entra ID for a discount.
Who it suits and how we help
Okta backup suits organisations that run Okta as their main identity provider for staff, particularly where many SaaS applications are provisioned through it. If you also use Microsoft 365, protecting both identity systems and the data behind them from one Keepit console keeps recovery in one place.
We confirm your Okta seat count, set up the connector in the UK region, agree retention and test a restore with you. Seat changes and renewals then run through your Forever Systems account. See other identity and access software on this site.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Okta have its own backup?
Keepit states that Okta does not provide native backup and restore, which is why a third-party backup is needed to recover deleted or changed configuration.
What Okta data does Keepit back up?
Users, groups, applications and their assignments, policies, network zones, authenticators, identity providers and organisation settings. Some items are kept as backup only, for reference rather than automatic restore.
Which Okta users count as seats?
Licensed users in onboarding and active states, including staged, provisioned, active, password reset, password expired and locked out users.
Can I buy Okta backup on its own?
Yes. Each Keepit service is licensed separately, so you can protect Okta without buying other connectors, although bundles of two or more services are discounted.