Stack: Google Workspace
Okta disaster recovery for teams running Google Workspace federated through Okta
Google Workspace federated through Okta means Gmail, Calendar, Drive, and Docs all live behind the Okta authentication policy. A single bad policy push can take the workforce offline for the apps they use every minute of the workday.
Butterfly captures versioned snapshots of the Okta configuration governing Google Workspace access — the SAML app, attribute mappings, the SCIM feed, assigned groups, sign-on policies, and Workflows automations. Restore preview shows the diff before any revert.
What you get
How Butterfly fits Google Workspace
Google Workspace SSO app is versioned
Every backup captures the Okta-side Google Workspace app integration — SAML signing certificate, attribute mapping, assigned groups, and sign-on policy.
SCIM provisioning into Google Workspace org units
The Okta-to-Google Workspace SCIM connection is part of every snapshot. Org-unit assignment, group provisioning, and license mapping are all captured.
Group rules drive Workspace license assignment
Restore preview shows which Workspace-bound groups would gain or lose members — and therefore which users would gain or lose Workspace licenses — before any change is committed.
What goes wrong
Three incidents you have already seen variations of
SAML signing-cert rotation breaks Workspace SSO
A scheduled signing-cert rotation was not coordinated with the Google Workspace SSO trust. The entire workforce hit a SAML error during the morning sign-in surge. Restore preview retrieves the prior certificate as a known-good fallback.
Sign-on policy change blocks contractor access to Drive
A device-trust tightening caught a contractor group that needed Drive access for an active customer project. Restore preview surfaces the policy diff and the affected population.
Org-unit mapping change strips Drive sharing controls
A change to the SCIM attribute mapping that drives Google Workspace org-unit assignment moved a population into a different OU with different sharing-policy defaults. Restore preview surfaces the mapping diff.
Honest scope
What Butterfly captures — and what it does not
In scope
The Okta-side configuration governing Google Workspace access: the Google Workspace SAML app integration, attribute mappings (including org-unit assignment), the SCIM provisioning configuration, assigned users and groups, group rules, sign-on policies, and Workflows automations.
Out of scope
We do not back up Gmail, Calendar, Drive content, Docs, or any Google Workspace user data. Google Workspace-side backup is owned by purpose-built tools (the Google Vault feature, Backupify, etc.).
Plans
Free, Standard, or Business
Free
$0 / forever
- 1 Okta connection
- 7-day retention
- 1 total backup
- No credit card
Standard
$1 / user / month — $99 minimum
- 2 Okta connections
- 90-day retention
- Restore preview + dry-run
- Audit Pack PDF (framework-filterable)
Business
$2 / user / month — $299 minimum
- Unlimited Okta connections
- Unlimited retention
- Continuity (warm standby)
- Priority restore support
Pricing reference: /upgrade. Provider coverage today: Okta, Okta Workflows, Auth0.
Regulatory shape
Compliance and audit angle
SOC 2 CC6 / CC7, ISO 27001 A.5.16, HIPAA 164.308 / 164.312 for healthcare orgs, and GDPR Article 32 all expect the identity layer governing workforce-collaboration tools to be restorable.
Butterfly's own SOC 2 Type II work is in progress; current status lives in the Trust Center.
Frequently asked
FAQ
Does Butterfly back up Gmail or Drive content?
No. Butterfly backs up the Okta configuration governing Google Workspace access. Gmail / Drive content backup is a different category.
Can we restore just the Workspace SSO app without touching other apps?
Yes. Restore preview lets you pick the scope — single app, single policy, single group — before committing.
How long does a restore preview take?
Typically under a minute. It is a non-mutating operation that produces a diff against the live tenant.
Recover your Okta org in minutes, not hours
Talk to Mick (the founder) for a 30-minute demo, or start the free trial. No credit card for the free tier.
More stacks
Okta DR for other stacks
Trust posture, subprocessors, and security details: Trust Center.