Newsletter for New Features in Innovation Release 11.46

Review the newsletter for new features in Innovation Release 11.46.

August 2026

Artificial Intelligence

Arlie now available in Commvault Console

Arlie's AI-powered chat and data analysis capabilities are now available in Commvault Console, extending the same experience available in Commvault Command Center. Administrators can ask questions and analyze data without manually digging through logs or building reports, helping save time and reduce manual effort.

Partner Ecosystem

ServiceNow MSP Integration – Automated Alert Auto-Resolution

This enhancement adds Automated Alert Auto-Resolution to the ServiceNow MSP integration. When a Commvault alert is resolved, the corresponding ServiceNow ticket is automatically closed. This keeps incident queues accurate and up to date. MSPs can focus on active issues while reducing manual ticket management and noise from false positives.

SaaS Applications and Active Directory

Confluence Backup & Recovery

This feature allows you to backup and restore your Atlassian Confluence workspaces, including pages, blogs, and related important data. It enables you to quickly recover critical content after accidental loss or disasters, helping you protect knowledge, maintain compliance, and avoid interruptions to your team's collaboration and business operations.

GitHub App-based authentication with multi-app (multi-token) support

This feature enables users to connect Commvault to GitHub using GitHub Apps and support multiple app installations within a single organization. It lets customers easily protect GitHub data at scale, meet security policies, and recover faster without manual credential management.

New SaaS Protection - BigCommerce - Early Adopter

For organizations using BigCommerce to support their online sales, customer transactions, inventory, and digital commerce operations, you can now easily protect BigCommerce data from accidental deletions, operational errors, outages, or cyberattacks with Commvault Cloud. That means less risk, faster recovery, and greater confidence that critical commerce operations are protected and can be recovered when your business needs them most.

New SaaS Protection - HubSpot - Early Adopter

For organizations that rely on HubSpot to manage customer relationships, sales opportunities, marketing campaigns, and service interactions, you can now protect critical HubSpot data with Commvault Cloud against accidental deletions, operational errors, outages, and cyberattacks. Empower your teams with faster recovery, stronger cyber resilience, and the confidence that customer-facing operations can keep moving forward.

New SaaS Protection - Monday.com - Early Adopter

For organizations using Monday.com to manage projects, track tasks, coordinate teams, and run critical business operations, you can now easily protect Monday.com data from operational errors or cyberattacks with Commvault. That means stronger operational resilience, reduced productivity loss, and the ability to quickly restore the information your teams depend on every day.

New SaaS Protection - ServiceNow - Early Adopter

For organizations that rely on ServiceNow to manage IT services and operational workflows Commvault Cloud now provides protection and recovery for critical ServiceNow apps and records. The result is greater operational resilience, reduced downtime, and confidence that the systems that manage your essential IT services can be restored quickly when disruptions occur.

New SaaS Protection - Zscaler - Early Adopter

For organizations relying on Zscaler to enforce Zero Trust access, secure remote users, and protect critical applications and data, you can now safeguard Zscaler security policies, access controls, and configurations with Commvault Cloud. That means faster recovery from accidental changes, configuration errors, or cyber incidents while maintaining the security posture and continuous access your business depends on.

Unified onboarding user experience for Salesforce protection across SaaS and Software

We are unifying our onboarding screens to look and feel the same across both our SaaS and Software solutions, enabling users to enjoy a consistent experience no matter which platform they use. 

Storage Solutions

Pure Storage FlashArray NFS File Snap support

This feature adds support for Pure Storage FlashArray file shares in the NAS Client, enabling users to efficiently protect NFS workloads using snapshots. It helps backup administrators reduce backup windows, save bandwidth, and confidently meet strict recovery objectives for their critical data.

Workload Protection

Google Cloud Firestore: Support for native and MongoDB-compatible modes

This feature adds support for Google Cloud Firestore for Native, Datastore, and MongoDB-compatible database modes, helping enable users to protect and manage their Firestore databases through a unified platform. It simplifies data protection and operations while improving data resilience and recovery readiness for cloud-native applications.

Restore OCI Virtual Machines to VMware vSphere and VMware Cloud Director

Restore Oracle Cloud Infrastructure virtual machines to a VMware environment from a secondary backup copy, helping to make it easier to validate recovery processes and perform compliance testing without relying on your primary backup location.

SAP IQ: Streaming Backup and Recovery Support

Protect SAP IQ databases with enterprise-grade backup and recovery.  This feature enables administrators to back up and restore SAP IQ databases with Commvault using streaming operations. It helps customers maintain data security, meet compliance requirements, and strengthen resilience against threats such as ransomware-supporting business continuity in the face of unexpected disruptions.

Smarter SQL Server Backups with Dynamic Stream Allocation

This feature automatically adjusts the number of backup streams based on database size and system resources, enabling faster, more efficient backups. It helps customers reduce manual setup, onboarding time, and optimize resource use to support reliable backups across all SQL Server environments.

July 2026

Artificial Intelligence

Arlie Recover

Arlie Recover orchestrates cyber recovery plans for critical threat incidents, helping teams respond faster and more safely. Operators stay in control with pause and stop actions, while every step is logged for audit and compliance -- helping minimize downtime and meet regulatory requirements.

Requirements: Threat Scan, Cleanroom, and an AirGap backup copy of the VM (to enable Cleanroom)
Current support: Azure VM recovery

Commvault Cloud Console

Commvault Console SaaS: Centralized Workload Protection Management

Commvault Console SaaS enables MSPs and customers to access and manage all supported Protect workloads from a single, unified interface.

This reduces the need to navigate across multiple rings, providing a consistent experience to centrally manage data protection, simplify operations, and respond faster across all protected workloads.

Commvault Cloud Platform

Centralized Global Encryption Management in Command Center

Backup administrators can now manage global encryption settings from a single location in Command Center, enforcing encryption policies at the storage pool level to enable all backup data to be consistently protected. This helps eliminate the risk of unprotected data by making encryption a centrally controlled, environment-wide standard rather than a per-workload configuration.

Cloud Rewind: Cross-Zone Recovery for GCP Assembly

Elastic Infrastructure for data management operations

Elastic compute infrastructure now automatically scales resources based on workload demand for AuxCopy, synthetic full backup, data verification, and DDB reconstruction operations, eliminating the need to provision and manage static media agent instances. In this release, elastic infrastructure is supported for cloud storage targets only, with pod-based credential management handling dynamic access to protected data.

Product Navigation: Sidebar Updates

The updated Commvault navigation experience groups related features into logical categories, making administrative and data protection workflows easier to navigate. The update also introduces page favorites and improved search to help users find features more quickly.

Simplified Email Delivery with Azure Communication Services - Software

Commvault Cloud (Software) introduces Azure Communication Services as an alternative to customer-managed SMTP for sending alerts, reports, and notifications. This reduces setup complexity and common configuration challenges while providing a more reliable option for email delivery.

Commvault Security Solutions

Cleanroom on-premises enhancements and expanded hypervisor support

Customers can now use Commvault Flex to create secure, isolated, and air-gapped storage for on-premises cleanroom recovery. This enables organizations to quickly stand up a secure recovery environment with minimal management effort while leveraging existing flash storage investments for faster recovery outcomes.

Cleanroom on-premises support has also been expanded across all Commvault-supported hypervisors, allowing customers to recover the Commvault control plane and applications into their preferred virtualization platform for cyber recovery testing or actual recovery scenarios.

In addition, Cleanroom runbooks now support VMware as a recovery target, enabling VMware customers to benefit from automated recovery orchestration, including ordered recovery workflows, script execution, and repeatable runbooks.

Commvault Cleanroom in Azure and AWS now supports Bring Your Own Storage (BYOS)

Commvault Cleanroom in cloud now supports application recovery from Azure Blob Storage and Amazon S3, giving customers greater flexibility in how they store and manage their backup data. Organizations can choose to recover from their own cloud storage (BYOS) or from Commvault AirGap, enabling them to align recovery operations with their security, compliance, and cost requirements while maintaining fast and reliable recovery outcomes.

Threat Scan Enhanced Encryption Detection Engine

This enhancement upgrades the encryption detection engine to recognize multiple ransomware encryption ciphers, separate compressed files from encrypted ones, and provide clear confidence scores within the Command Center UI. It provides customers with better context as to which files may have been impacted by ransomware to build greater trust in security alerts for faster, more confident response. 

Threat Scan Synthetic Recovery support for VMware

This capability extends Synthetic Recovery to both full virtual machine (VM) and VM guest file-level restore workflows. It enables clean recovery operations while minimizing data rollback to earlier states. In both scenarios, Threat Scan programmatically identifies the last known good version of data prior to encryption or compromise and creates a Synthetic Recovery point, then selectively restores it to either a new VM guest instance or as part of a full VM recovery utilizing automated OS re-provisioning (also known as pave and repave).

Critical Workloads - AI stack

AI Tool Discovery for Endpoints

Laptop backup administrators can now discover AI tools installed on endpoint devices. Users can review the tools in Laptop Dashboard - giving them an ability to make better data protection decisions for Laptops or share results with Compliance team as needed.

Using this solution, users can

• Detect installed AI tools across endpoints with minimal performance overhead
• Capture tool name, version, install path, and last-used signal for each device
• View fleet-wide inventory in the Laptop Dashboard and drill into per-device detail
• Filter, export results to CSV, and share the reports

Supported AI tools: Claude Cowork, ChatGPT Desktop, and OpenClaw

Supported platforms: Windows and macOS endpoints

Partner Ecosystem

Add support for S3 Object Lock - Governance mode

This feature adds support for S3 Object Lock in Governance mode, enabling customers to protect backup data from deletion while allowing authorized users to reclaim storage when needed. It helps organizations manage tenant data flexibly, confirming secure retention and efficient storage use without sacrificing control.

Cloud/Object Storage: WORM Storage Optimization for Object Storage

This feature optimizes WORM-protected object storage by continuously reclaiming expired data, eliminating disruptive maintenance events. It enables customers to reduce storage costs, smooth performance, and support flexible workloads, all while maintaining data immutability and ransomware protection. It helps customers increase efficiency and operational stability in their storage environments.

MSP Multi-Person Authorization (MPA) Enhancements

This release expands Multi-Person Authorization (MPA) with a series of enhancements that strengthen governance while simplifying administration for MSPs. New capabilities include a 7-day onboarding grace period for new tenants, broader support for Resellers, Aggregators, and Child Companies, improved auditability through approval reason tracking and configuration change notifications, streamlined MSP group management, scope-based policy configuration, and granular operation-level exclusion controls. These enhancements help MSPs enforce security policies with greater flexibility, visibility, and operational efficiency across their managed environments.

MSP-Level Cloud Discovery for Azure and AWS in Commvault Console

This feature enables Managed Service Providers (MSPs) to discover and manage Azure and AWS cloud resources across tenants directly from the Global Command Center -without requiring tenant access.

By providing a centralized view of discovery connections across all tenants, it helps enhance visibility, streamline operations, and reduce administrative overhead. At the same time, it helps maintain strict tenant-level data isolation while preserving full discovery and protection capabilities within each individual tenant.

Morpheus VM Agentless Guest File Recovery via Commvault CV Tools

Enable agentless guest file recovery for Morpheus-managed virtual machines through Commvault CV Tools integration. This capability allows users to easily browse backup contents and perform granular file restores without deploying or maintaining in-guest agents, reducing overhead while accelerating recovery operations.

VMWare: Recover VMware virtual machines into HPE VME (Morpheus)

This new feature lets customers restore VMware vSphere virtual machines directly into HPE VME (Morpheus), eliminating manual conversion or rebuilding. By simplifying cross-platform recovery, it reduces migration time and risk-helping customers transition to HPE VME with greater confidence and ease.

SaaS Applications and Active Directory

E-Discovery (Compliance Search) Support for Google Workspace

Commvault Cloud now offers E-Discovery support for Google Workspace designed to help organizations accelerate investigations and compliance requests with advanced compliance search capabilities. Customers can quickly locate, review, and export relevant content across protected Google Workspace data from a single interface, helping reduce the time and costs associated with E-Discovery while supporting legal and regulatory obligations. 

External DNS Support for Active Directory Forest Recovery

Forest recovery runbooks now support environments that use externally managed DNS platforms such as Infoblox, BIND, and other DNS appliances.

Administrators can configure forest recovery workflows to use either Active Directory-integrated DNS or external DNS servers. During recovery, recovered domain controllers are automatically pointed to the configured external DNS server, and the workflow includes a guided pause to allow administrators to update required DNS records before recovery continues.

Enhanced DNS validation checks help confirm that required DNS entries resolve correctly before replication and recovery operations proceed, improving reliability and reducing recovery risk.

This enhancement expands recovery flexibility for enterprise environments that separate DNS infrastructure from Active Directory management.

Available with the Active Directory Enterprise Edition license.

Flexible In-Place Forest Recovery for Active Directory

Forest recovery now includes flexible in-place restore options, allowing Active Directory to be recovered directly on existing domain controllers-when the underlying systems are still available (e.g., schema corruption or other logical directory issues). This enables organizations to quickly roll back to a known good state without needing to provision new infrastructure.

New DCPromo-based workflows provide additional flexibility, including the ability to demote and repromote an existing domain controller to rebuild its directory data from replication partners, or to demote and remove domain controllers from the recovered forest entirely. Together, these options give administrators greater control to stabilize and clean up their environment during recovery, reducing downtime and simplifying complex forest-level incidents.

Available with the Active Directory Enterprise Edition license.

Identity Resilience for Okta (Commvault SaaS)

Now generally available, Identity Resilience for Okta extends core backup and recovery capabilities with advanced visibility and precision recovery features designed to help organizations respond faster to configuration drift, human error, and malicious changes. The solution provides automated full and incremental backups of Okta users, groups, applications, and policies, with granular, point-in-time recovery to restore critical identity information when needed.

With this GA release, customers can compare backup copies against previous backups and live tenant configurations to quickly identify what changed, when it changed, and validate recovery actions before restoration. New attribute-level comparison and restore capabilities provide granular insight into configuration differences and enable selective recovery of individual settings without impacting unrelated configurations. These enhancements help simplify complex recovery scenarios, reduce operational risk, and give identity teams greater confidence in maintaining a secure and resilient Okta environment.

Storage Solutions

Advisory: Commvault Storage family - An update to the HyperScale name

We are simplifying the Commvault family of on-prem storage options and renaming those products for greater market clarity. Together, our offerings will be known as the Commvault Storage family.  

• HyperScale X, our integrated appliance, will now be known as Commvault Grid.  

• HyperScale Flex, our flexible and scale-out deployment option, will now be known as Commvault Flex.  

• HyperScale Edge, our edge and branch offering, will be known as Commvault Edge.  

The changes to these product names in-product and on our documentation site will be rolling out over the coming months. 

AirGap Re-Tier: Azure Frequent Access / Infrequent Access Storage - SaaS

This feature allows customers to choose between Frequent Access and Infrequent Access storage tiers in Commvault AirGap SaaS on Azure, optimizing costs and resiliency. It enables flexible data protection that matches recovery needs, giving users peace of mind and efficient management within a fully managed SaaS experience.

AirGap: Support Private Endpoint for Oracle Cloud Infrastructure (OCI) - Software

Commvault AirGap now supports Oracle Cloud Infrastructure (OCI) Object Storage Private Endpoints. This feature allows customers to access their Commvault-managed OCI Object Storage buckets using private network connectivity within OCI, eliminating the need for public Object Storage endpoints.

By leveraging OCI Private Endpoints, organizations can:

• Keep backup and recovery traffic on the OCI private network.
• Reduce exposure to the public internet.
• Align with enterprise security and compliance requirements.
• Maintain secure HTTPS connectivity using customer-managed networking, DNS, routing, and security policies.

To enable this feature, customers create an OCI Object Storage Private Endpoint in their OCI tenancy, configure it with the Commvault-provided bucket information (Namespace, Compartment OCID, and Bucket Name), update DNS and application endpoint configuration, and validate connectivity using the private endpoint FQDN.

CVFS: Write Performance Improvement

This feature allows all nodes to confirm write operations at the same time, enabling customers to experience faster and more efficient data storage. It helps them complete tasks more quickly and reliably, improving productivity and reducing delays when working with large files or high-volume data operations.

CommVault Compute Node

Compute node is the newest member of the Commvault storage family which runs a VaultOS image. By consolidating the Media Agent, Access Node, and Index Server roles into a single, unified node, the Compute Node eliminates the complexity of managing disparate components while delivering the full power of Commvault's data protection platform. Its integrated architecture reduces hardware footprint, streamlines administration, and accelerates time-to-value for organizations of any scale.

Commvault Flex Expansion

This feature expands hardware and storage support, gives customers flexible network setup options, and makes maintenance and security easier. It enables customers to choose their preferred servers, storage solutions, and configurations, improving system compatibility, simplifying management, and providing more control for their data protection needs.

Commvault Grid: Update system requirements to support 24TB drives

This feature enables Commvault Grid systems to support 24TB drives, allowing customers to achieve higher backup capacity with fewer systems. It helps them reduce hardware costs, save space, and simplify management, making it easier and more cost-effective to meet their growing data storage needs.  Depending on the node type (N4, N12, N24) additional system memory or larger metadata drives may be needed.  Always consult the relevant BOMs for details on exact requirements.

Improve Authcode based installation experience

Allows the use of AuthCode for installation of the Commvault Storage Family to be attached to Commserve without the use of Commserve Credentials, instead relying on the use of AuthCode.

Integration with AD for Improved Limited Access Account for System Administration

This feature expands what limited-access accounts can do, allowing administrators to perform essential maintenance, troubleshooting, and recovery tasks without needing full root access. It enables users to work efficiently and securely, with audit trails, reducing delays and eliminating workarounds.  It also defines multiple roles so that restrictions may be granular and limited based on roles and leverages Active Directory to assign users to the needed role.

On-Prem Storage Platform Support for Linux 9.x via VaultOS to support Intel Xeon 6th Gen CPU

This feature enables customers to deploy On-Prem Storage Platform solutions on the latest Linux 9.x based VaultOS operating system, supporting new Intel Xeon 6th Gen CPUs. It ensures modern security, reliable updates, and compatibility with both new and existing hardware, helping organizations maintain a secure, up-to-date, and future-ready infrastructure.

Workload Protection

AWS EC2: Deliver Application-Consistent Backups for Critical Workloads

Commvault now supports application-consistent backups for AWS EC2 workloads by orchestrating AWS Systems Manager scripts before and after snapshots, helping preserve application state across Linux and Windows environments while providing visibility into execution through backup job logs.

Accelerate AWS Disaster Recovery with Snapshot-Based Auto Recovery

Customers can now use Auto Recovery to replicate AWS snapshots and orchestrate failover between production and disaster recovery environments. By leveraging native AWS snapshots, organizations can achieve faster failover and reduced data loss while simplifying disaster recovery operations.

Customers can choose between streaming backups or AWS snapshots for replication and recovery, providing the flexibility to align disaster recovery strategies with their performance, recovery time, and cost objectives. This expanded choice helps organizations improve resilience, reduce downtime, and recover critical applications more quickly when disruptions occur.

Amazon RDS and Aurora: Auto-Scaling Compute for Optimized Snapshot-Based Protection

This feature introduces auto-provisioning of compute resources that dynamically scales based on the size and growth of protected databases. It reduces manual configuration while helping optimize performance and efficiency for snapshot-based protection-particularly in large or rapidly growing environments. The result is simplified operations, reduced management overhead, and data protection that scales with business demands.

Amazon Redshift: Air-Gapped Backups for Long-Term Retention and Compliance

This feature enables customers to export and schedule long-term backups of Amazon Redshift data and metadata to Commvault's air-gapped storage. By providing secure, isolated retention for critical data, it helps organizations meet compliance requirements, strengthen cyber resilience, and improve business continuity and recovery flexibility.

Azure Databricks: Protect and Recover Delta Tables and Workspace Configurations

Commvault now protects Azure Databricks catalogs, delta tables, and workspace configurations, enabling reliable recovery after incidents such as accidental deletions or data corruption. This capability helps restore both data and associated metadata to a consistent state, reducing downtime and supporting data resilience for analytics and AI workloads.

Customers can see the full list of supported Databricks resources here: Supported Databricks resources

Certify and Support SAP HANA database encrypted with Local secure store (LSS)

This feature enables backup administrators to back up and restore SAP HANA encrypted databases that use Local Secure Store (LSS) keys. 

Convert Azure VMs for OpenStack Recovery

GCP Virtual Machines: Automated Discovery and Policy-Based Protection with Tags and Groups

This feature unifies resource discovery under a single scope, automatically identifying and categorizing all assets across workloads. Customers can easily create rules for grouping and protection, streamlining onboarding and helping establish comprehensive coverage. This reduces fragmented configurations, enhances visibility, simplifies asset management, and workload protection with reduced errors.

Google Cloud Bigtable: Scalable Backup and Recovery for Instances and Tables

This feature helps enable administrators to back up and restore Bigtable instances, providing comprehensive data protection and reliable recovery. It supports fast, consistent restoration for compliance requirements and disaster recovery scenarios, helping to reduce risk and improve operational resilience.

Google Cloud Database: Unified onboarding across Software and SaaS deployments

Google CloudSQL: Support for Cloud SQL for Microsoft SQL Server

High-Performance Off-Host Snapshot Backups for Nutanix AHV via iSCSI Volume Groups

Informix: Simplified Protection and Recovery of Configuration and ixbar Metadata Files

This feature protects Informix configuration and emergency boot files, helping enable customers to quickly restore their database environment and backup metadata information during disasters. With simplified backup and recovery of ixbar, administrators can improve disaster recovery readiness and reduce the risk of recovery delays caused by lost or corrupted metadata files.

Oracle Database 26ai: Advanced RMAN Protection and Recovery

This feature adds support for Oracle Database 26ai RMAN backup and recovery across standalone deployments, IntelliSnap, Exadata, block-level backup, and instant recovery workflows. It provides comprehensive protection and flexible recovery options, helps enable organizations to safeguard critical Oracle data, accelerate recovery operations, and maintain business continuity in the event of data loss or system disruptions.

Oracle: Incremental Intellisnap integration with RMAN for efficient, Low-Impact Backups

Commvault now enhances Oracle IntelliSnap Image Copy with support for incremental backup copies-using either filesystem-based or RMAN-based methods-to snap-capable NFS volumes. This enables faster, more efficient Oracle database protection while reducing reliance on Commvault drivers and proprietary Oracle storage interfaces. RMAN-based recovery is fully preserved, making this capability ideal for Oracle appliance and Exadata environments that require high-performance, low-impact backup and recovery operations.

PostgreSQL: Optimized Log Backup Support on Kubernetes

Red Hat OpenShift Virtualization VM Protection

OpenShift Virtualization support is now generally available, extending Kubernetes protection to include virtual machines running on Red Hat OpenShift Virtualization. Previously available through the Early Adopter program, this release enables protection of both containerized workloads and virtual machines through a unified platform. Customers can perform in-place and out-of-place VM restores, along with enterprise-grade file-level recovery and network-optimized restores, delivering consistent protection across the data estate. This capability is available in Commvault version 11.42 for both Software and SaaS.

SMB/CIFS Share Backup on Nutanix Files and Qumulo: Enhanced Performance with Linux Access Nodes

Customers using IntelliSnap backups on Nutanix and protecting Qumulo SMB/CIFS shares can now leverage Linux access nodes to help enhance and optimize performance. This approach reduces exposure associated with traditional access methods while delivering more efficient data movement and improved backup reliability.

Simplify Google Cloud VM Data Protection with Autoprovisioning and Autoscaling

By unifying VM provisioning workflows for Commvault services, organizations can simplify operations for processes such as synthetic full backups and threat scanning. The result is reduced configuration complexity, fewer manual errors, and a scalable, consistent approach that improves the efficiency and reliability of data protection.

Snowflake: Backup and Recovery

Commvault now delivers policy-driven backup and recovery for Snowflake databases, schemas, and tables, extending protection beyond native Time Travel limits. The solution enables long-term, immutable retention with granular recovery of data and metadata, helping organizations reduce data loss, control reprocessing costs, and support compliance requirements.

Virtual Machines: Application-Aware IntelliSnap Backups

You can now configure Application-Aware backups for IntelliSnap-enabled VM groups.  IntelliSnap backups can now protect in-guest applications such as Microsoft Exchange, SQL Server, Oracle, Active Directory, and SharePoint. The Virtual Server Agent automatically discovers supported applications, deploys required plug-ins, and performs an application-consistent snapshot to enable granular recovery-while continuing to use IntelliSnap for VM-level protection.

Virtual Machines: Enhance Metadata Collection to include OS Disk Identity and LVM Space Usage

Commvault automatically identifies guest VM's OS/boot disk and computes LVM usage, enabling system administrators to accurately report disk utilization. This simplified metadata collection helps establish effortless resource planning and migration to the cloud, providing administrators with efficient operations and better-informed decisions without manual intervention.

Virtualization: Strengthening oVirt and OLVM Backup Security with Keycloak