Skip to main content

How can we help you?

Druva Documentation

Configure Druva inSync to protect Public folder data

The availability of this feature may be limited based on the license type, region, and other criteria. To access this feature, contact your Account Manager or Support.

Before you begin

Before you initiate inSync configuration to protect Public folder data, ensure that you have the following accounts created.

  • Microsoft 365 global administrator account with a valid Microsoft 365 license.

Log into inSync Management Console as a inSync Cloud administrator and perform the following steps to set-up inSync to protect Public folder.

Step 1: Provide inSync permissions to access Public folders data

To protect and backup Public folder data, inSync requires authorization from Microsoft 365. Also, the inSync Cloud administrator must accept the required permissions to allow inSync access to Public folder data. 

inSync uses OAuth 2.0 to communicate with services like Microsoft 365. OAuth is an open protocol for token-based authentication and authorization on the internet. For more information on OAuth 2.0, see the OAuth website.

Procedure

To establish the connection with Microsoft 365 and provide required permissions to inSync:

  1. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.
  2. Click SaaS Apps.
  3. Click Microsoft 365
  4. Click Add Microsoft 365 Account.

M365_Not Configured_First screen_Oct6_marked.png

  1. On the Configure for Backup page,  click  Configure beside Druva Exchange Online & Public folder to configure Public folder for backup.

Reconfigure_M365_EO_PF.png

  1. On the Microsoft 365 login page, enter the Microsoft 365 global administrator's user name and password for Microsoft 365, and then click Sign in
  2. Click Accept to grant inSync app the required permissions to access Public folder data. See Required permissions to access Public folders.

Support for Azure Active Directory (AD) Conditional Access policies

If your organization uses Azure AD Conditional Access policies for authenticating and providing conditional access to users, we support these policies during the app configuration step.

 

Contact Support to sign up for the Conditional Access policy feature. If you are an existing customer, you must reconfigure your Microsoft 365 app after you have signed up for this feature.

If the conditions in the access policies are not satisfied, the token-based authentication fails with the following error message.

Microsoft_365_Conditional_Access_Failure_Message.png

For more information, see Support for Azure Active_Directory (AD) Conditional Access policies.

Verify Configuration

After you complete the configuration of inSync with Microsoft 365 app, you can use the Verify Configuration option to check if inSync can access your app or users' data. 

Procedure

To verify the configuration:

  1. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.
  2. Click SaaS Apps.
  3. Click Microsoft 365
  4. On the Overview page, click  and then click Verify.
  5. In the Verify Configuration dialog that appears, select the Exchange Online & Public folder app to verify the configuration.
  6. Enter the Public folder name in the Select a Public folder field. 

When you select Exchange Online & Public folder app and provide the Public folder name for verification, inSync performs the following checks as a part of verification: 

  • App authentication: This step checks if inSync can utilize the available refresh tokens to validate the connection with the Microsoft 365 tenant.
  • User and user’s endpoints existence: This step checks if the user exists at the Microsoft 365 end.

7.  If any of the authentication steps fail for the selected app, you are prompted with an error message. Click the error message to view the error details.

Step 2: Get data encryption key (ekey)

To ensure that the Microsoft 365 data that is backed up is secure, you must configure inSync to get the data encryption key(ekey). 

 inSync requires access to the ekey to initiate the scheduled backup of any Microsoft 365 app data. The ekey is used to encrypt the data when it is being backed up to the inSync Cloud. This is part of the digital envelope encryption process that Druva strictly adheres to. Druva does not store ekey of the users and has no access to the data.

Use one of the following methods to enable inSync to get the data encryption key(ekey):

Deploy inSync Connector 
At least one inSync Connector is configured and connected to the inSync Cloud (default option). For more information, see: 

Note: 

  • inSync Connector acts as a SaaS Apps connector to provide the ekeys without requiring users to have their devices connected for the SaaS Apps backup .
  • If the registered inSync Connector are not connected, backup of the configured SaaS Apps data fails.
  • inSync Connector does not need to have any domains or AD mappings added to it.
  • inSync generates a Not Connected alert if inSync Connector is not connected.

Enable Cloud Key Management 

If none of the earlier mentioned deployment options are used, you must have the Cloud Key Management feature enabled. For more information, see Configure Key Management for SaaS Apps.

Step 2: Configure Public folders for backup and restore

The settings that you define automatically applies to all subsequent auto-discovered Public folder. You can also change the settings of any auto-discovered Public folder. 

 You can configure Public folder for backup and download in the following ways:

2.1 Auto Configuration

2.2 Custom configuration

2.1 Auto Configuration of Public folders

Use the Auto Configuration Settings (Default) option to automatically detect any new Public folder  and to apply the global or same backup schedule to each of the newly discovered and configured Public folder.

  1. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.
  2. Click SaaS Apps.
  3. Click Microsoft 365.
  4. Click Public folder. A page that lists all the discovered Public folder appears.

       The status of all the discovered Public folder by default is set as Not Configured

Not configured_landing.png

  1. Click Auto Configuration. Enter the following details in the Auto Configuration wizard and click Save.  

 Auto-Config.png

Field Description
Discover & Storage
Auto discover Public folders for backup Select this checkbox if you want inSync to automatically discover new  Public folder added to the Public folder setup of your organization. inSync runs the discovery process every 24 hours. This setting is enabled by default.
Auto assign storage

Select this checkbox if you want inSync to automatically assign storage for any newly discovered Public folder. It is mandatory for a Public folder to be assigned storage for inSync to back it up.

Select Storage

Displays all the configured storage regions. Select storage from the list. 

Storage once assigned cannot be changed later.

Default Backup Settings

Backup frequency

Select the frequency of backups for Public folder. By default, it is once a day.

You can set the frequency as per your need.

Data Retention

By default, data retention is set to Forever that is, unlimited retention.

2.2 Custom configuration of Public folders for backup

Use the custom configuration option to provide a different configuration and backup settings for each of the discovered Public folder.

  1. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.
  2. Click SaaS Apps.
  3. Click Microsoft 365.
  4. Click Public folder. A page that lists all the discovered Public folder appears.

        The status of all the discovered Public folder by default is set as Not Configured.  

        For more information about the status of discovered  Public folder, see Public folder status.

  1. Click the Public folder name that you want to configure for backup and restore. The  Configure Public folder Backup page appears.
  2. If you choose to use the Use Default option, review the details, and click Save. If you have selected the Custom option, enter the following details, and click Save.
Field Description
Summary
Path \<Public folder name>
Name Displays the name of the Public folder.
Assign storage

Select storage from the drop-down list.

 Storage once assigned cannot be changed later.

Backup Settings
Settings

Displays the backup and retention policy settings that you want to apply to this Public folder. The following options are available:

  • Use Default (Default) - Select this option if you want to apply the defined global Public folder settings for this Public folder. The settings are displayed and are non-editable. 
  • Custom - Select this option if you want to define custom settings for this Public folder. This enables you to define a custom backup schedule for this Public folder.

Backup frequency

Select the frequency of backups for the Public folder.

  • Select Use Default option to apply the default backup frequency set for Auto Configuration Settings.
  • Select the Custom option to set and apply the desired backup frequency for the selected Public folder .

If you have selected Custom, then you have the option to select and set the desired backup frequency.

NoteFor successful scheduled backups, ensure that the pre-requisites to backup cloud apps data  are met.

Data Retention

By default, data retention is set to Forever that is, unlimited retention.

Exclude Paths

This option is displayed only if you have selected Custom settings for backup and retention.

In the Exclude Paths box, specify the relative URL path of a Public folder separated by a semicolon to exclude the specified paths from Public folder backup.

Note: It is recommended that you do not use  ;  within your Public folder name.

Configure_Public_folder_updated.png

Congratulations! You have completed the configuration successfully. 

Related Activities

  • Was this article helpful?