Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Entra plans and pricing

Select the best option for your identity needs

Microsoft Entra ID and Microsoft Entra Suite

Explore identity and network access features and pricing.

Explore Microsoft entra plans and pricing
  • Partially included icon Partially included
  • included icon Included

Microsoft Entra ID P1

Originally starting from $6.00 now starting from $6.00

$6.00 $6.00

user/month



Microsoft Entra ID P1 (formerly Azure Active Directory P1) is available as a standalone or included with Microsoft 365 E3 for enterprise customers and Microsoft 365 Business Premium for small to medium businesses.

Microsoft Entra ID P2

Originally starting from $9.00 now starting from $9.00

$9.00 $9.00

user/month



Microsoft Entra ID P2 (formerly Azure Active Directory P2) is available as a standalone or included with Microsoft 365 E5 for enterprise customers.

Microsoft Entra Suite

Originally starting from $12.00 now starting from $12.00

$12.00 $12.00

user/month



The Microsoft Entra Suite combines network access, identity protection, governance, and identity verification solutions. A subscription to Microsoft Entra ID P1 or a package that includes Microsoft Entra ID P1 is required. Special pricing is available for Microsoft Entra ID P2 and Microsoft 365 E5 customers.

  • Partially included icon Partially included
  • included icon Included
Microsoft Entra ID
included
Included
Conditional access
Included
Included
Role-based access control (RBAC)
Included
Included
Advanced group management (dynamic groups, naming policies, expiration, default classification)
Included
Included
Cross-tenant user synchronization, multitenant organizations
Included
Included
SharePoint limited access
included
Included
Session lifetime management
included
Included
Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)
included
Included
Application launch portal and user application collections in My Apps
Included
Included
Self-service: password change, reset, and unlock; sign-in activity search and reporting; group management (My Groups); entitlement management (My Access); app launching (My Apps); delegated password resets and phone number management (My Staff)
Partially included
Partially Included
Advanced security and usage reports
Included
Included
Microsoft Entra ID Protection
Included
Included
Risk-based conditional access
Included
Included
Real-time dynamic sign-in assessment
Included
Included
Real-time dynamic user assessment
Included
Included
Authentication context (step-up authentication)
Included
Included
Device and application filters for conditional access
Included
Included
Token protection
Included
Included
Vulnerabilities and risky account detection
Included
Included
Risk event investigation
Included
Included
Microsoft Entra ID Governance
Partially included
Partially included
Included
Automated user provisioning to software as a service (SaaS) apps
included
included
Included
Automated user provisioning to on-premises apps
Included
Included
Included
Automated group provisioning to apps
Included
Included
Included
HR-driven provisioning
Included
Included
Included
Terms-of-use attestation
Included
Included
Included
Basic access certifications and reviews
Included
Included
Machine learning-assisted access certifications and reviews
Included
Basic entitlement management
Included
Included
Entitlement management custom extensions (Microsoft Azure Logic Apps)
Included
Entitlement management with Microsoft Entra Verified ID
Included
Lifecycle workflows
Included
Identity governance dashboard
Included
Privileged identity management
Included
Included
Microsoft Entra Verified ID
Partially included
Partially included
included
Verifiable credentials issuance
included
included
included
Verifiable credentials verification
included
included
included
High-assurance entitlement management with Microsoft Entra ID Governance
included
Face Check high-assurance facial matching verification

*up to 8 verifications per month, per license

Microsoft Entra Internet Access
Included
Universal conditional access
Included
Traffic logging and policy monitoring
Included
Web category filtering
Included
Fully qualified domain name filtering
Included
Microsoft Entra Private Access
Included
Identity-centric Zero Trust network access (ZTNA)
Included
Conditional access across all private apps and resources  
Included
Adaptive multifactor authentication
Included
Seamless single sign-on (SSO) access
Included
Fast and easy access at global scale
Included

Microsoft Entra ID Free is included with Microsoft cloud subscriptions, such as Microsoft Azure and Microsoft 365.1

  • Support multifactor authentication, unlimited SSO across any SaaS app, basic reports, and self-service password change for cloud users.
  • Manage users and groups in the cloud.
  • Sync your on-premises directory with Microsoft Entra ID. 

Get more with Microsoft 365

Provide seamless and protected sign-in experiences for frontline and informational workers with a Microsoft 365 subscription that includes Microsoft Entra ID.

Back to tabs

Reimagine secure access

[1] The free edition of Microsoft Entra ID is included with a subscription of a commercial online service such as Microsoft Azure, Microsoft Dynamics 365, Microsoft Intune, Microsoft Power Platform, and others in countries where they are available for sale.

Follow Microsoft Security