Azure Active Directory Plans Pricing
Microsoft Entra ID (formerly Azure Active Directory) is sold per-user-per-month as four tiers - Free (included with any Microsoft cloud service), Microsoft Entra ID P1, Microsoft Entra ID P2, and Microsoft Entra ID Governance. Add-on SKUs include Microsoft Entra Workload ID, External ID (B2C/B2B with monthly active user pricing), Verified ID, and Internet Access / Private Access.
Plans
Included free with every Azure, Microsoft 365, Power Platform, and Dynamics 365 subscription. Up to 50,000 directory objects (300,000 with verified domain).
- User and group management
- SSO to thousands of SaaS apps (limited)
- B2B collaboration
- Self-service password change for cloud users
- Security defaults / MFA via security defaults
Premium identity and access management. $6 per user/month.
- Conditional Access
- SaaS SSO unlimited
- Self-service password reset for hybrid users
- Application Proxy
- Cloud App Discovery
- Microsoft Entra Connect Health
P1 features plus risk-based identity protection and PIM. $9 per user/month.
- Identity Protection (risk-based Conditional Access)
- Privileged Identity Management (PIM)
- Access Reviews
- All P1 features
Identity lifecycle, entitlement management, and access reviews. $7 per user/month add-on (in addition to P1/P2).
- Entitlement management
- Lifecycle workflows
- Access certifications / reviews
- Separation of duties
Customer/partner identity (CIAM). Billed by Monthly Active Users (MAU) with a 50,000-MAU free tier.
- B2C / customer identity flows
- Custom branding
- Social and local accounts
Conditional Access, identity protection, and lifecycle for service principals / managed identities.
- Conditional Access for workloads
- Workload ID risk detection
- Access reviews for service principals