Microsoft Azure Active Directory Plans Pricing
Microsoft Entra ID (formerly Azure Active Directory) is licensed per user per month, on top of a Free baseline included with Microsoft cloud subscriptions. P1 and P2 add advanced security and identity protection; the Entra Suite bundles network access, governance, and verification on top of P1/P2. External ID, Workload ID, Internet/Private Access, ID Governance, and Verified ID are sold as standalone add-ons.
Plans
Included at no cost with Microsoft cloud subscriptions (Azure, Microsoft 365). Provides MFA, unlimited SSO across SaaS apps, and basic reports.
- Multifactor authentication
- Unlimited SSO across SaaS apps
- Basic reports
- Self-service password change for cloud users
Advanced identity management for hybrid environments with conditional access, MFA, and self-service password management. Annual commitment.
- Conditional access
- Multifactor authentication
- Self-service password reset for hybrid identities
- Application proxy
Adds identity protection (risk-based conditional access, real-time threat assessment) and Privileged Identity Management. Annual commitment.
- Identity Protection (risk-based conditional access)
- Privileged Identity Management
- Access reviews
- All P1 features
Bundle combining network access, identity protection, governance, and verification. Requires P1 or P2 subscription.
- Microsoft Entra Internet Access
- Microsoft Entra Private Access
- Microsoft Entra ID Governance
- Microsoft Entra Verified ID premium
- Microsoft Entra ID Protection
Standalone secure web gateway / SSE component.
- SaaS access controls
- Web content filtering
- Threat protection
Standalone identity-centric ZTNA for private apps.
- ZTNA for private apps
- Per-app conditional access
- Identity-aware proxy
Standalone identity governance with entitlement management, access reviews, and lifecycle workflows.
- Entitlement management
- Lifecycle workflows
- Access reviews
Identity for service principals, managed identities, and workload identities.
- Conditional access for workload identities
- Identity Protection for workloads
- Access reviews for workload identities
CIAM for customers and partners. Free up to 50,000 monthly active users; usage-priced thereafter (see Azure pricing page).
- CIAM for customer-facing apps
- Custom branding
- Social and federated identity providers