Microsoft Entra plans and pricing
Select the best option for your identity needs
Microsoft Entra ID and Microsoft Entra Suite
Explore identity and network access features and pricing.
| Microsoft Entra ID P1Originally starting from $6.00 now starting from $6.00 $6.00 $6.00 user/month, paid yearly (annual commitment) | Microsoft Entra ID P2Originally starting from $9.00 now starting from $9.00 $9.00 $9.00 user/month, paid yearly (annual commitment) | Microsoft Entra SuiteOriginally starting from $12.00 now starting from $12.00 $12.00 $12.00 user/month, paid yearly (annual commitment) |
| Microsoft Entra ID P1 | Microsoft Entra ID P2 | Microsoft Entra Suite | |
|---|---|---|---|
| |||
| Microsoft Entra ID | | | |
| Conditional Access | | | |
| Role-based access control (RBAC) | | | |
| Advanced group management (dynamic groups, naming policies, expiration, default classification) | | | |
| Cross-tenant user synchronization, multitenant organizations | | | |
| SharePoint limited access | | | |
| Session lifetime management | | | |
| Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory) | | | |
| Application launch portal and user application collections in My Apps | | | |
| Self-service: password change, reset, and unlock; sign-in activity search and reporting; group management (My Groups); entitlement management (My Access); app launching (My Apps); delegated password resets and phone number management (My Staff) | | | |
| Advanced security and usage reports | | | |
| Microsoft Entra ID Protection | | | |
| Risk-based Conditional Access | | | |
| Real-time dynamic sign-in assessment | | | |
| Real-time dynamic user assessment | | | |
| Authentication context (step-up authentication) | | | |
| Device and application filters for Conditional Access | | | |
| Token protection | | | |
| Vulnerabilities and risky account detection | | | |
| Risk event investigation | | | |
| Microsoft Entra ID Governance | | | |
| Automated user provisioning to software as a service (SaaS) apps | | | |
| Automated user provisioning to on-premises apps | | | |
| Automated group provisioning to apps | | | |
| HR-driven provisioning | | | |
| Terms-of-use attestation | | | |
| Access certifications and reviews | | | |
| Machine learning-assisted access certifications and reviews | | | |
| Entitlement management | | | |
| Entitlement management custom extensions (Microsoft Azure Logic Apps) | | | |
| Entitlement management with Microsoft Entra Verified ID | | | |
| Lifecycle workflows | | | |
| Identity governance dashboard | | | |
| Privileged identity management | | | |
| Microsoft Entra Verified ID | | | |
| Verifiable credentials issuance | | | |
| Verifiable credentials verification | | | |
| High-assurance entitlement management with Microsoft Entra ID Governance | | | |
| Face Check high-assurance facial matching verification | | | *up to 8 verifications per month, per license |
| Microsoft Entra Internet Access | | | |
| Flexible deployment options (Client or Branch) | | | |
| Universal Tenant Restrictions | | | |
| Source IP Restoration & Compliant Network controls | | | |
| Universal Conditional Access | | | |
| Traffic logging and policy monitoring | | | |
| Web category filtering | | | |
| Fully qualified domain name filtering | | | |
| Microsoft Entra Private Access | | | |
| Identity-centric Zero Trust network access (ZTNA) | | | |
| Conditional Access across all private apps and resources | | | |
| Adaptive multifactor authentication | | | |
| Seamless single sign-on (SSO) access | | | |
| Fast and easy access at global scale | | | |
Microsoft Entra ID Free is included with Microsoft cloud subscriptions, such as Microsoft Azure and Microsoft 365.1
- Support multifactor authentication, unlimited SSO across any SaaS app, basic reports, and self-service password change for cloud users.
- Manage users and groups in the cloud.
- Sync your on-premises directory with Microsoft Entra ID.
Get more with Microsoft 365
Provide seamless and protected sign-in experiences for frontline and informational workers with a Microsoft 365 subscription that includes Microsoft Entra ID.
Microsoft Entra Suite standalone products
Explore how Microsoft Entra Suite products perform as standalone solutions.
Microsoft Entra Internet Access
Originally starting from $5.00 now starting from $5.00
$5.00 $5.00
user/month, paid yearly
(annual commitment)
Microsoft Entra Internet Access helps you:
- Secure access to all internet and SaaS applications and resources.
- Extend conditional access policies to the internet.
- Keep your users and devices safe from internet threats.
- Easily manage and monitor your internet access policies for your hybrid workforce through a unified Zero Trust policy engine.
Microsoft Entra Private Access
Originally starting from $5.00 now starting from $5.00
$5.00 $5.00
user/month, paid yearly
(annual commitment)
Microsoft Entra Private Access helps you:
- Elevate network access security with a Zero Trust network access (ZTNA) solution.
- Bring adaptive identity security to all your private applications and resources.
- Deliver fast and easy access for users at global scale.
Microsoft Entra ID Governance
Originally starting from $7.00 now starting from $7.00
$7.00 $7.00
user/month, paid yearly
(annual commitment)
Microsoft Entra ID Governance is available for Microsoft Entra ID P1 and P2 customers. Microsoft Entra ID Governance helps you:
- Secure access to all internet and SaaS applications and resources.
- Improve productivity by ensuring that people have access when they require it—without the burden of manual approvals.
- Strengthen security by reducing risk arising from access abuse and making smart access decisions based on machine learning.
- Automate the approval process for customary resource access to help you focus on AI-provided insights and exceptions.
Verified ID is included with any Microsoft Entra ID subscription. Face Check with Verified ID is a premium feature included in the Microsoft Entra Suite or that can be purchased separately.
- Verify and issue credentials from your organization for any unique identity attributes.
- Empower your users with ownership of their digital credentials and greater visibility.
- Reduce security vulnerabilities and simplify the audit process.
- Use facial matching to provide high-assurance identity verification at scale.
Enable Verified ID for free in the Microsoft Entra admin center. Quickly onboard and verify identities for your users today.
Additional Microsoft Entra products
Explore Microsoft Entra standalone products and add-ons.
- Secure external identities, such as customers, partners, business guests, and business consumers.
- Streamline secure collaboration.
- Create frictionless end-user experiences.
- Accelerate the development of secure applications.
The External ID core features are free for your first 50,000 monthly active users.
Microsoft Entra Workload ID
Originally starting from $3.00 now starting from $3.00
$3.00 $3.00
workload identity/month, paid yearly
(annual commitment)
Workload ID is a standalone product that helps you:
- Control workload identity access with adaptive policies.
- Reduce the risk exposure from lost or stolen identities or credentials.
- Get a comprehensive health-check view of workload identities.
Workload ID supports application identities and service principles in Azure, requiring licenses per workload identity per month. Learn more.
Microsoft Entra Domain Services is a standalone offering that helps you:
- Manage your domain services in the cloud.
- Join Azure virtual machines to a managed domain without domain controllers.
- Sign in to apps connected to your managed domain with Microsoft Entra credentials.
Follow Microsoft Security