Trace Id is missing
Skip to main content
Microsoft Security

Explore the latest in AI-powered cybersecurity capabilities announced at Microsoft Secure.  Watch on demand >  Read the announcement >

Microsoft Entra Plans & Pricing

Select the best option for your identity needs

Explore identity and access management products and pricing

Azure Active Directory is now Microsoft Entra ID.

Explore Microsoft entra plans and pricing
  • Limited checkmark icon Partially included
  • Fully checkmark icon Included

Microsoft Entra ID Free

Originally starting from Free now starting from Free

Free Free


Included with Microsoft cloud subscriptions such as Microsoft Azure, Microsoft 365, and others.1

Microsoft Entra ID P1

Originally starting from $6.00 now starting from $6.00

$6.00 $6.00

user/month


Microsoft Entra ID P1 (formerly Azure Active Directory P1) is available as a standalone or included with Microsoft 365 E3 for enterprise customers and Microsoft 365 Business Premium for small to medium businesses, including versions of these suites that do not include Microsoft Teams.

Most comprehensive

Microsoft Entra ID P2

Originally starting from $9.00 now starting from $9.00

$9.00 $9.00

user/month


Microsoft Entra ID P2 (formerly Azure Active Directory P2) is available as a standalone or included with Microsoft 365 E5 for enterprise customers, including versions of this suite that do not include Microsoft Teams.

Promotional offer available2

Microsoft Entra ID Governance

Originally starting from $7.00 now starting from $7.00

$7.00 $7.00

user/month


Entra ID Governance is an advanced set of identity governance capabilities for Microsoft Entra ID P1 and P2 customers. Special pricing is available for Microsoft Entra P2 customers.

  • Limited checkmark icon Partially included
  • Fully checkmark icon Included
Authentication, single sign-on and application access
Partially included
Included
Included
Cloud authentication
(Pass-through authentication, password hash synchronization)
Included
Included
Included
Federated authentication
(Active Directory Federation Services or federation with other identity providers)
Included
Included
Included
Single sign-on (SSO) unlimited
Included
Included
Included
Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)
Included
Included
Included
Group assignment to applications
Included
Included
Cloud app discovery (Microsoft Defender for Cloud Apps)
Included
Included
Application proxy for on-premises, header-based, and integrated Windows authentication
Included
Included
Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)
Included
Included
Included
Service level agreement
Included
Included
Customizable user sign-in page
Included
Included
Included
Administration and hybrid identity
Partially included
Included
Included
Role-based access control (RBAC)
Included
Included
Included
User and group management
Included
Included
Included
Advanced group management (dynamic groups, naming policies, expiration, default classification)
Included
Included
Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync
Included
Included
Included
Cloud monitoring and analytics for your key on-premises servers (connect health)
Included
Included
Delegated administration-built-in roles
Included
Included
Included
Microsoft identity manager user client access license (CAL)
Included
Included
Cross-tenant user synchronization
Included
Included
End user self service
Partially included
Partially included
Included
Application launch portal (My Apps)
Included
Included
Included
User application collections in My Apps
Included
Included
Included
Self-service account management portal (My Account)
Included
Included
Included
Self-service password change for cloud users
Included
Included
Included
Self-service password reset/change/unlock with on-premises write-back
Included
Included
Self-service sign-in activity search and reporting
Included
Included
Self-service group management (My Groups)
Included
Included
Self-service entitlement management (My Access)
Included
Included
Multifactor authentication and conditional access
Partially included
Included
Included
Multifactor authentication (MFA)
Included
Included
Included
Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)
Included
Included
Included
Conditional access
Included
Included
SharePoint limited access
Included
Included
Session lifetime management Learn more
Included
Included
Continuous access evaluation
Included
Included
Global password protection and management (cloud-only users)
Included
Included
Included
Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)
Included
Included
Custom security attributes
Included
Included
Identity protection
Included
Risk-based Conditional Access (sign-in risk, user risk)
Included
Authentication context (step-up authentication)
Included
Device and application filters for Conditional Access
Included
Token protection
Included
Vulnerabilities and risky accounts
Included
Risk event investigation
Included
Event logging and reporting
Partially included
Included
Included
Basic security and usage reports
Included
Included
Included
Advanced security and usage reports
Included
Included
Security Information and Events Management (SIEM) connectivity
Included
Included
Included
Identity governance
Partially included
Partially included
Partially included
Included
 Automated user provisioning to SaaS apps
Included
Included
Included
Included
Automated user provisioning to on-premises apps
Included
Included
Included
Automated group provisioning to apps
Included
Included
Included
HR-driven provisioning
Included
Included
Included
Terms of use attestation
Included
Included
Included
Basic access certifications and reviews
Included
Included
Machine learning assisted access certifications and reviews
Included
Basic entitlement management
Included
Included
Entitlement management – separation of duties
Included
Included
Entitlement management with Verified ID
Included
Lifecycle workflows
Included
Identity governance dashboard
Included
Privileged identity management (PIM)
Included
Included

Microsoft Entra Domain Services

  • Azure Active Directory Domain Services is now Microsoft Entra Domain Services. Manage your domain services in the cloud to:

  • Gain access to managed domain services.

  • Join Azure virtual machines to a managed domain without domain controllers.

  • Sign-in to apps connected to your managed domain with Microsoft Entra credentials.

Get more with Microsoft 365

Provide seamless and protected sign-in experiences for frontline and informational workers with a Microsoft 365 subscription that includes Microsoft Entra ID.

Back to tabs

Explore new network access products in preview

Secure access to all private apps and resources, for users anywhere, with identity-centric Zero Trust network access. Pricing information will be provided when these products become available.

A woman sitting at a desk while working on a Microsoft Surface.

Microsoft Entra Private Access

Enable users to securely connect to private apps from anywhere.

A man sitting at a desk having a phonecall on a cellphone, while working on a laptop.

Microsoft Entra Internet Access

Secure access to internet, SaaS, and Microsoft 365 apps.

Reimagine secure access

  • [1] The free edition of Microsoft Entra ID is included with a subscription of a commercial online service such as Microsoft Azure, Microsoft Dynamics 365, Microsoft Intune, Microsoft Power Platform, and others in countries where they are available for sale.
  • [2] Microsoft Entra ID Governance is available at a promotional price for Microsoft Entra ID P2 customers until June 30, 2024.

Follow Microsoft