Microsoft Entra Plans and Pricing | Microsoft Security (2024)

Authentication, single sign-on and application access

Authentication, single sign-on and application access

Authentication, single sign-on and application access

Authentication, single sign-on and application access

Cloud authentication
(Pass-through authentication, password hash synchronization)

Cloud authentication
(Pass-through authentication, password hash synchronization)

Cloud authentication
(Pass-through authentication, password hash synchronization)

Cloud authentication
(Pass-through authentication, password hash synchronization)

Federated authentication
(Active Directory Federation Services or federation with other identity providers)

Federated authentication
(Active Directory Federation Services or federation with other identity providers)

Federated authentication
(Active Directory Federation Services or federation with other identity providers)

Federated authentication
(Active Directory Federation Services or federation with other identity providers)

Single sign-on (SSO) unlimited

Single sign-on (SSO) unlimited

Single sign-on (SSO) unlimited

Single sign-on (SSO) unlimited

Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)

Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)

Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)

Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)

Group assignment to applications

Group assignment to applications

Group assignment to applications

Group assignment to applications

Cloud app discovery (Microsoft Defender for Cloud Apps)

Cloud app discovery (Microsoft Defender for Cloud Apps)

Cloud app discovery (Microsoft Defender for Cloud Apps)

Cloud app discovery (Microsoft Defender for Cloud Apps)

Application proxy for on-premises, header-based, and integrated Windows authentication

Application proxy for on-premises, header-based, and integrated Windows authentication

Application proxy for on-premises, header-based, and integrated Windows authentication

Application proxy for on-premises, header-based, and integrated Windows authentication

Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)

Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)

Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)

Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)

Service level agreement

Service level agreement

Service level agreement

Service level agreement

Customizable user sign-in page

Customizable user sign-in page

Customizable user sign-in page

Customizable user sign-in page

Administration and hybrid identity

Administration and hybrid identity

Administration and hybrid identity

Administration and hybrid identity

Role-based access control (RBAC)

Role-based access control (RBAC)

Role-based access control (RBAC)

Role-based access control (RBAC)

User and group management

User and group management

User and group management

User and group management

Advanced group management (dynamic groups, naming policies, expiration, default classification)

Advanced group management (dynamic groups, naming policies, expiration, default classification)

Advanced group management (dynamic groups, naming policies, expiration, default classification)

Advanced group management (dynamic groups, naming policies, expiration, default classification)

Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync

Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync

Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync

Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync

Cloud monitoring and analytics for your key on-premises servers (connect health)

Cloud monitoring and analytics for your key on-premises servers (connect health)

Cloud monitoring and analytics for your key on-premises servers (connect health)

Cloud monitoring and analytics for your key on-premises servers (connect health)

Delegated administration-built-in roles

Delegated administration-built-in roles

Delegated administration-built-in roles

Delegated administration-built-in roles

Microsoft identity manager user client access license (CAL)

Microsoft identity manager user client access license (CAL)

Microsoft identity manager user client access license (CAL)

Microsoft identity manager user client access license (CAL)

Cross-tenant user synchronization

Cross-tenant user synchronization

Cross-tenant user synchronization

Cross-tenant user synchronization

End user self service

End user self service

End user self service

End user self service

Application launch portal (My Apps)

Application launch portal (My Apps)

Application launch portal (My Apps)

Application launch portal (My Apps)

User application collections in My Apps

User application collections in My Apps

User application collections in My Apps

User application collections in My Apps

Self-service account management portal (My Account)

Self-service account management portal (My Account)

Self-service account management portal (My Account)

Self-service account management portal (My Account)

Self-service password change for cloud users

Self-service password change for cloud users

Self-service password change for cloud users

Self-service password change for cloud users

Self-service password reset/change/unlock with on-premises write-back

Self-service password reset/change/unlock with on-premises write-back

Self-service password reset/change/unlock with on-premises write-back

Self-service password reset/change/unlock with on-premises write-back

Self-service sign-in activity search and reporting

Self-service sign-in activity search and reporting

Self-service sign-in activity search and reporting

Self-service sign-in activity search and reporting

Self-service group management (My Groups)

Self-service group management (My Groups)

Self-service group management (My Groups)

Self-service group management (My Groups)

Self-service entitlement management (My Access)

Self-service entitlement management (My Access)

Self-service entitlement management (My Access)

Self-service entitlement management (My Access)

Multifactor authentication and conditional access

Multifactor authentication and conditional access

Multifactor authentication and conditional access

Multifactor authentication and conditional access

Multifactor authentication (MFA)

Multifactor authentication (MFA)

Multifactor authentication (MFA)

Multifactor authentication (MFA)

Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)

Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)

Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)

Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)

Conditional access

Conditional access

Conditional access

Conditional access

SharePoint limited access

SharePoint limited access

SharePoint limited access

SharePoint limited access

Continuous access evaluation

Continuous access evaluation

Continuous access evaluation

Continuous access evaluation

Global password protection and management (cloud-only users)

Global password protection and management (cloud-only users)

Global password protection and management (cloud-only users)

Global password protection and management (cloud-only users)

Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)

Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)

Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)

Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)

Custom security attributes

Custom security attributes

Custom security attributes

Custom security attributes

Identity protection

Identity protection

Identity protection

Identity protection

Risk-based Conditional Access (sign-in risk, user risk)

Risk-based Conditional Access (sign-in risk, user risk)

Risk-based Conditional Access (sign-in risk, user risk)

Risk-based Conditional Access (sign-in risk, user risk)

Authentication context (step-up authentication)

Authentication context (step-up authentication)

Authentication context (step-up authentication)

Authentication context (step-up authentication)

Device and application filters for Conditional Access

Device and application filters for Conditional Access

Device and application filters for Conditional Access

Device and application filters for Conditional Access

Token protection

Token protection

Token protection

Token protection

Vulnerabilities and risky accounts

Vulnerabilities and risky accounts

Vulnerabilities and risky accounts

Vulnerabilities and risky accounts

Risk event investigation

Risk event investigation

Risk event investigation

Risk event investigation

Event logging and reporting

Event logging and reporting

Event logging and reporting

Event logging and reporting

Basic security and usage reports

Basic security and usage reports

Basic security and usage reports

Basic security and usage reports

Advanced security and usage reports

Advanced security and usage reports

Advanced security and usage reports

Advanced security and usage reports

Security Information and Events Management (SIEM) connectivity

Security Information and Events Management (SIEM) connectivity

Security Information and Events Management (SIEM) connectivity

Security Information and Events Management (SIEM) connectivity

Identity governance

Identity governance

Identity governance

Identity governance

Automated user provisioning to SaaS apps

Automated user provisioning to SaaS apps

Automated user provisioning to SaaS apps

Automated user provisioning to SaaS apps

Automated user provisioning to on-premises apps

Automated user provisioning to on-premises apps

Automated user provisioning to on-premises apps

Automated user provisioning to on-premises apps

Automated group provisioning to apps

Automated group provisioning to apps

Automated group provisioning to apps

Automated group provisioning to apps

HR-driven provisioning

HR-driven provisioning

HR-driven provisioning

HR-driven provisioning

Terms of use attestation

Terms of use attestation

Terms of use attestation

Terms of use attestation

Basic access certifications and reviews

Basic access certifications and reviews

Basic access certifications and reviews

Basic access certifications and reviews

Machine learning assisted access certifications and reviews

Machine learning assisted access certifications and reviews

Machine learning assisted access certifications and reviews

Machine learning assisted access certifications and reviews

Basic entitlement management

Basic entitlement management

Basic entitlement management

Basic entitlement management

Entitlement management – separation of duties

Entitlement management – separation of duties

Entitlement management – separation of duties

Entitlement management – separation of duties

Entitlement management with Verified ID

Entitlement management with Verified ID

Entitlement management with Verified ID

Entitlement management with Verified ID

Lifecycle workflows

Lifecycle workflows

Lifecycle workflows

Lifecycle workflows

Identity governance dashboard

Identity governance dashboard

Identity governance dashboard

Identity governance dashboard

Privileged identity management (PIM)

Privileged identity management (PIM)

Privileged identity management (PIM)

Privileged identity management (PIM)