Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Entra ID Protection

Block identity takeover in real time.

A person using a laptop.

Reimagine secure access with Microsoft Entra

Discover the latest identity and access innovations and how to strengthen your defenses with Microsoft Entra.

What is Microsoft Entra ID Protection?

Microsoft Entra ID Protection uses advanced machine learning to identify sign-in risks and unusual user behavior to block, challenge, limit, or allow access.

Prevent identity compromise

Extend risk-based adaptive access policies to help protect against malicious actors. 

Help protect against credential theft

Safeguard sensitive access with high-assurance authentication methods.

Deepen insights into your identity security posture

Export intelligence back into any Microsoft or other security information and event management (SIEM) and extended detection and response (XDR) tools for further investigation.

Watch the video

See how Microsoft Entra ID Protection helps you quickly and effectively prevent identity compromise.


Use advanced machine learning and connected intelligence to automate remediation and prevent account takeovers.

Identify high-risk users and sign-ins with actionable insights

Elevate your identity security with a comprehensive snapshot of prevented identity attacks and common attack patterns in an easily digestible dashboard.

Revoke access immediately when conditions change

Automatically block, limit, require multifactor authentication, or prompt password reset when policy violations are detected, such as location changes and stolen or replayed tokens.

Seamlessly integrate with other Microsoft and non-Microsoft security solutions

Review informative signals and easily export data insights into products such as Microsoft Defender.

Back to tabs

Microsoft Entra ID Protection

Microsoft Entra ID Protection is available with a subscription to Microsoft Entra ID P2 or Microsoft 365 E5, including versions of E5 that do not include Microsoft Teams:

  • Microsoft Entra ID P2 is included with Microsoft 365 E5, including versions of this suite that do not include Microsoft Teams, and offers a free 30-day trial.
  • Azure and Office 365 subscribers can buy Microsoft Entra ID P2 online.

Explore the Microsoft Entra product family

Safeguard connections between people, apps, resources, and devices with multicloud identity and network access products.

Identity and access management

  • Microsoft Entra ID (formerly Azure Active Directory)

    Manage and protect users, apps, workloads, and devices.

  • Microsoft Entra ID Governance

    Protect, monitor, and audit access to critical assets.

  • Microsoft Entra External ID

    Provide your customers and partners with secure access to any app.

  • Microsoft Entra Domain Services

    Manage your domain controllers in the cloud.

New identity categories

  • Microsoft Entra Verified ID

    Issue and verify identity credentials based on open standards.

  • Microsoft Entra Permissions Management

    Manage identity permissions across your multicloud infrastructure.

  • Microsoft Entra Workload ID

    Help apps and services to access cloud resources securely.

Network access

  • Microsoft Entra Internet Access

    Secure access to internet, software as a service, and Microsoft 365 apps.

  • Microsoft Entra Private Access

    Help users to securely connect to private apps from anywhere.

Documentation and training



Explore Microsoft Entra ID Protection documentation.


Concepts explained

Develop an effective strategy for identity threat detection and response.


How-to guides

Review step-by-step configuration guides to help manage and detect user and sign-in risk.


Frequently asked questions

Find answers to common questions about identity security and preventing identity compromise.

Secure access for a connected world

Get started with Microsoft Entra identity and network access products.

Follow Microsoft