Explore the latest in AI-powered cybersecurity capabilities announced at Microsoft Secure. Watch on demand > Read the announcement >
Microsoft Entra Plans & Pricing
Select the best option for your identity needs
Explore identity and access management products and pricing
Azure Active Directory is now Microsoft Entra ID.
| Microsoft Entra ID FreeOriginally starting from Free now starting from Free Free Free
| Microsoft Entra ID P1Originally starting from $6.00 now starting from $6.00 $6.00 $6.00 user/month
| Most comprehensive Microsoft Entra ID P2Originally starting from $9.00 now starting from $9.00 $9.00 $9.00 user/month
| Promotional offer available2 Microsoft Entra ID GovernanceOriginally starting from $7.00 now starting from $7.00 $7.00 $7.00 user/month
|
|---|---|---|---|---|
| ||||
| Authentication, single sign-on and application access | | | | |
| Cloud authentication (Pass-through authentication, password hash synchronization) | | | | |
| Federated authentication (Active Directory Federation Services or federation with other identity providers) | | | | |
| Single sign-on (SSO) unlimited | | | | |
| Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0) | | | | |
| Group assignment to applications | | | | |
| Cloud app discovery (Microsoft Defender for Cloud Apps) | | | | |
| Application proxy for on-premises, header-based, and integrated Windows authentication | | | | |
| Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication) | | | | |
| Service level agreement | | | | |
| Customizable user sign-in page | | | | |
| Administration and hybrid identity | | | | |
| Role-based access control (RBAC) | | | | |
| User and group management | | | | |
| Advanced group management (dynamic groups, naming policies, expiration, default classification) | | | | |
| Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync | | | | |
| Cloud monitoring and analytics for your key on-premises servers (connect health) | | | | |
| Delegated administration-built-in roles | | | | |
| Microsoft identity manager user client access license (CAL) | | | | |
| Cross-tenant user synchronization | | | | |
| Multi-tenant organizations | | | | |
| End user self service | | | | |
| Application launch portal (My Apps) | | | | |
| User application collections in My Apps | | | | |
| Self-service account management portal (My Account) | | | | |
| Self-service password change for cloud users | | | | |
| Self-service password reset/change/unlock with on-premises write-back | | | | |
| Self-service sign-in activity search and reporting | | | | |
| Self-service group management (My Groups) | | | | |
| Self-service entitlement management (My Access) | | | | |
| Multifactor authentication and conditional access | | | | |
| Multifactor authentication (MFA) | | | | |
| Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations) | | | | |
| Conditional access | | | | |
| SharePoint limited access | | | | |
| Session lifetime management Learn more | | | | |
| Continuous access evaluation | | | | |
| Global password protection and management (cloud-only users) | | | | |
| Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory) | | | | |
| Custom security attributes | | | | |
| Identity protection | | | | |
| Risk-based Conditional Access (sign-in risk, user risk) | | | | |
| Authentication context (step-up authentication) | | | | |
| Device and application filters for Conditional Access | | | | |
| Token protection | | | | |
| Vulnerabilities and risky accounts | | | | |
| Risk event investigation | | | | |
| Event logging and reporting | | | | |
| Basic security and usage reports | | | | |
| Advanced security and usage reports | | | | |
| Security Information and Events Management (SIEM) connectivity | | | | |
| Identity governance | | | | |
| Automated user provisioning to SaaS apps | | | | |
| Automated user provisioning to on-premises apps | | | | |
| Automated group provisioning to apps | | | | |
| HR-driven provisioning | | | | |
| Terms of use attestation | | | | |
| Basic access certifications and reviews | | | | |
| Machine learning assisted access certifications and reviews | | | | |
| Basic entitlement management | | | | |
| Entitlement management Custom Extensions (Logic Apps) | | | | |
| Entitlement management with Verified ID | | | | |
| Lifecycle workflows | | | | |
| Identity governance dashboard | | | | |
| Privileged identity management (PIM) | | | | |
Microsoft Entra Domain Services
-
Azure Active Directory Domain Services is now Microsoft Entra Domain Services. Manage your domain services in the cloud to:
-
Gain access to managed domain services.
-
Join Azure virtual machines to a managed domain without domain controllers.
-
Sign-in to apps connected to your managed domain with Microsoft Entra credentials.
Get more with Microsoft 365
Provide seamless and protected sign-in experiences for frontline and informational workers with a Microsoft 365 subscription that includes Microsoft Entra ID.
Products breaking new ground in identity
Meet the challenges of an interconnected world with verifiable credentials, cloud infrastructure entitlement management (CIEM), and non-human identity solutions.
Microsoft Entra Verified ID
-
Verified ID is currently available for free.
-
Verified ID is currently included with any Microsoft Entra ID subscription, including Microsoft Entra ID Free, at no additional cost.
-
Verify and issue credentials from your organization for any unique identity attributes.
-
Empower your users with ownership of their digital credentials and greater visibility.
-
Reduce organizational risk and simplify the audit process.
-
Provide developers with a seamless way to create user-centric, serverless apps.
-
Start using decentralized identity by enabling Verified ID for free in the Microsoft Entra admin center. Quickly onboard and begin issuing and verifying credentials for your users today.
Microsoft Entra Permissions Management
Originally starting from $10.40 now starting from $10.40
$10.40 $10.40
resource/month
-
Permissions Management is a standalone offering that allows you to:
-
Get a multidimensional view of risks across identities, permissions, and resources.
-
Automate least privilege policy enforcement in your multicloud infrastructure.
-
Prevent breaches caused by misuse and malicious exploitation of permissions.
-
A billable resource is defined as a cloud service that uses compute or memory. Permissions Management supports all resources across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform but only requires licenses for billable resources per cloud provider. Learn more.
Microsoft Entra Workload ID
Originally starting from $3.00 now starting from $3.00
$3.00 $3.00
workload identity/month
-
Workload ID is a standalone product that allows you to:
-
Control workload identity access with adaptive policies.
-
Reduce the risk exposure from lost or stolen identities or credentials.
-
Get a comprehensive health-check view of workload identities.
-
Pricing for Workload ID is by workload identity per month.
Explore new network access products in preview
Secure access to all private apps and resources, for users anywhere, with identity-centric Zero Trust network access. Pricing information will be provided when these products become available.
Microsoft Entra Private Access
Enable users to securely connect to private apps from anywhere.
- [1] The free edition of Microsoft Entra ID is included with a subscription of a commercial online service such as Microsoft Azure, Microsoft Dynamics 365, Microsoft Intune, Microsoft Power Platform, and others in countries where they are available for sale.
- [2] Microsoft Entra ID Governance is available at a promotional price for Microsoft Entra ID P2 customers until June 30, 2024.
Follow Microsoft