Export or delete your organization
Download a copy of your organization's data, what it leaves out, and how to delete the organization.
A super administrator can download a JSON copy of the organization from Settings → Privacy → Export this organization. It needs a recent MFA check, and API tokens can't use it.
The export runs in the background. When it's ready, only the admin who asked for it can download it, for 24 hours. After that it's deleted. On IdRa it's stored encrypted. The file you download isn't encrypted, so keep it somewhere safe. Starting a new export replaces the last one, and erasing a person deletes any export waiting to be downloaded. It can't reach a copy you've already downloaded.
Requesting and downloading are both in the System Log, as system.org_export.request and system.org_export.download.
What's in it
- People and their profiles, and profile attribute definitions
- Groups, memberships and group rules
- Apps, their assignments, and OAuth client settings such as redirect URIs
- Policies, shared policies and device assurance policies
- Network zones
- Identity providers and routing rules, without their credentials
- Account, branding, email template, authenticator and threat settings
- The System Log for the last 90 days, up to 100,000 events (the newest ones)
Only your organization's data is included. The file's manifest lists every table and column it holds, row counts, and whether the System Log was cut short.
What isn't
Never included: password hashes, TOTP and recovery secrets, private keys, client secrets, API tokens, session tokens and encrypted credential values. People will have to set a new password or sign in through your new identity provider, and apps will need new secrets.
Also left out: devices, partners, PAM servers and vault secrets, posture findings, SCIM connection state, hooks and log streams. So are settings that can hold credentials, such as CAPTCHA, Duo and Twilio. The manifest lists each excluded table, column and setting with the reason.
The export is a copy to read or convert. IdRa has no import for this file, and it isn't a backup you can restore.
Size limit
An export can be up to 100 MB of JSON. A larger organization sees a "too large" failure rather than a partial file: contact the operator.
Delete your organization
Deleting isn't self-service today. Contact the operator of your IdRa service and ask. Deletion drops the organization's database and can't be undone, and its address is never reused. Export what you need first.