Microsoft Entra Plans and Pricing | Microsoft Security (2024)

Partially included
Included

Authentication, single sign-on and application access

Cloud authentication
(Pass-through authentication, password hash synchronization)

Federated authentication
(Active Directory Federation Services or federation with other identity providers)

Single sign-on (SSO) unlimited

Software as a service (SaaS) apps with modern authentication (Microsoft Entra ID application gallery apps, SAML, and OAUTH 2.0)

Group assignment to applications

Cloud app discovery (Microsoft Defender for Cloud Apps)

Application proxy for on-premises, header-based, and integrated Windows authentication

Secure hybrid access partnerships (Kerberos, NTLM, LDAP, RDP, and SSH authentication)

Service level agreement

Customizable user sign-in page

Administration and hybrid identity

Role-based access control (RBAC)

User and group management

Advanced group management (dynamic groups, naming policies, expiration, default classification)

Synchronize Active Directory identities with Microsoft Entra ID using cloud sync or connect sync

Cloud monitoring and analytics for your key on-premises servers (connect health)

Delegated administration-built-in roles

Microsoft identity manager user client access license (CAL)

Cross-tenant user synchronization

End user self service

Application launch portal (My Apps)

User application collections in My Apps

Self-service account management portal (My Account)

Self-service password change for cloud users

Self-service password reset/change/unlock with on-premises write-back

Self-service sign-in activity search and reporting

Self-service group management (My Groups)

Self-service entitlement management (My Access)

Multifactor authentication and conditional access

Multifactor authentication (MFA)

Passwordless (Windows Hello for Business, Microsoft Authenticator, FIDO2, security key integrations)

Conditional access

SharePoint limited access

Session lifetime management Learn more

Continuous access evaluation

Global password protection and management (cloud-only users)

Global password protection and management (custom banned passwords, users synchronized from on-premises Active Directory)

Custom security attributes

Identity protection

Risk-based Conditional Access (sign-in risk, user risk)

Authentication context (step-up authentication)

Device and application filters for Conditional Access

Token protection

Vulnerabilities and risky accounts

Risk event investigation

Event logging and reporting

Basic security and usage reports

Advanced security and usage reports

Security Information and Events Management (SIEM) connectivity

Identity governance

Automated user provisioning to SaaS apps

Automated user provisioning to on-premises apps

Automated group provisioning to apps

HR-driven provisioning

Basic access certifications and reviews

Machine learning assisted access certifications and reviews

Basic entitlement management

Entitlement management – separation of duties

Entitlement management with Verified ID

Lifecycle workflows

Identity governance dashboard

Privileged identity management (PIM)

Microsoft Entra Plans and Pricing | Microsoft Security (2024)

FAQs

How much does entra permissions management cost? ›

Entra Permissions Management pricing and licensing

Permissions Management is available today as a standalone solution, priced at $125 per resource, per year. The resources supported are: Compute resources. Container clusters.

Read On ›

What does Microsoft Entra include? ›

Microsoft Entra ID Free.

Provides user and group management, on-premises directory synchronization, basic reports, self-service password change for cloud users, and single sign-on across Azure, Microsoft 365, and many popular SaaS apps.

Discover More Details ›

Is Microsoft Entra included in an E3 license? ›

Microsoft Entra ID P1 (formerly Azure Active Directory P1) is available as a standalone or included with Microsoft 365 E3 for enterprise customers and Microsoft 365 Business Premium for small to medium businesses, including versions of these suites that do not include Microsoft Teams.

What is a user risk in Microsoft Entra Identity Protection? ›

Risk detections in Microsoft Entra ID Protection include any identified suspicious actions related to user accounts in the directory. Risk detections (both user and sign-in linked) contribute to the overall user risk score that is found in the Risky Users report.

See Details ›

Is Microsoft Entra cloud based? ›

Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) product that provides comprehensive visibility and control over permissions for any identity and any resource in Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP).

Find Out More ›

What is Microsoft Entra admin? ›

What is the Microsoft Entra Admin Center? The Admin Center is a central platform where users can efficiently manage their cloud resources and services in the Microsoft Entra cloud. The dashboard allows users to easily create, configure, monitor, and manage their Azure resources.

Tell Me More ›

What is Microsoft Entra replacing? ›

Microsoft Entra ID is the new name for Azure AD. The names Azure Active Directory, Azure AD, and AAD are replaced with Microsoft Entra ID. Microsoft Entra is the name for the product family of identity and network access solutions.

Show Me More ›

Why is Microsoft changing Azure to Entra? ›

Today, one of the key announcements at Reimagine secure access with Microsoft Entra is that Azure Active Directory (Azure AD) is being renamed to Microsoft Entra ID as part of our commitment to simplify secure access experiences for everyone.

Explore More ›

What are the benefits of Microsoft Entra? ›

AI for cybersecurity.
Cloud security.
Cloud workload protection.
Data security.
Frontline workers.
Identity & network access.
Identity threat detection & response.
Industrial & critical infrastructure.

More items...

Is Entra replacing Azure? ›

Learn how we're unifying the Microsoft Entra product family and how we're renaming Azure Active Directory (Azure AD) to Microsoft Entra ID. Microsoft Entra ID is Microsoft's cloud-based identity and access management solution, which helps your employees and guest users sign in securely and access resources.

Show Me More ›

Is Microsoft Entra included in an E5 license? ›

Microsoft Entra ID P2 - Microsoft Entra ID P2 is available as a standalone product or included with Microsoft 365 E5 for enterprise customers.

Read The Full Story ›

Is Microsoft Entra the same as Azure AD? ›

Microsoft Entra ID is the new name for Azure AD. All licensing and functionality remain the same. No action is required from you.

See Details ›

What is the purpose of Microsoft Entra password protection? ›

Microsoft Entra Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.

Get More Info Here ›

What is Microsoft Entra verified ID? ›

This solution automates verification of identity credentials and claims. The verifier is an organization that requests proof and, upon receipt, verifies that the claims in the credentials satisfy requirements.

How to enable Microsoft Entra ID protection? ›

Enable policies

Sign in to the Microsoft Entra admin center as at least a Conditional Access Administrator.
Browse to Protection > Conditional Access.
Select New policy.
Give your policy a name. ...
Under Assignments, select Users or workload identities. ...
Under Cloud apps or actions > Include, select All cloud apps.

More items...

Feb 5, 2024

What is permission access management? ›

Access management is a security practice that focuses on controlling and monitoring access to data, resources, and systems within an organization. It helps make sure that only explicitly authorized individuals have appropriate permissions to access specific information or perform certain tasks.

View Details ›

What is permissions management? ›

Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) solution that provides comprehensive visibility into permissions assigned to all identities (users and workloads), actions, and resources across cloud infrastructures.

What is the permission creep index? ›

Permission Creep Index (PCI): The graph displays the # of identities contributing to PCI. The PCI graph may display one or more bubbles. Each bubble displays the number of identities that are considered high risk. High-risk refers to the number of users who have permissions that exceed their normal or required usage.

Learn More ›

What is CloudKnox io? ›

CloudKnox delivers a single platform for managing the entire identity privilege lifecycle across hybrid cloud utilizing a revolutionary Activity-based Authorization model.

Discover More Details ›