Active Directory Plans Pricing
Microsoft Entra ID (the cloud successor to Azure AD / on-prem Active Directory) is sold per user per month, with a Free edition bundled into Microsoft cloud subscriptions plus paid P1, P2, and Suite tiers and several standalone identity products. Programmatic access via Microsoft Graph is metered through directory throttling rather than additional per-call billing — pricing is the per-user Entra licence.
Active Directory Plans Pricing is the machine-readable pricing-plan profile for Microsoft Active Directory on the APIs.io network, conforming to the API Commons Plans specification.
It defines 8 plans, covering freemium, subscription, and usage-based tiers, with named plans including Microsoft Entra ID Free, Microsoft Entra ID P1, Microsoft Entra ID P2, Microsoft Entra Suite, Microsoft Entra ID Governance (Standalone), and 3 more.
Tagged areas include Active Directory, Authentication, Authorization, Directory Services, and Identity Management.
Plans
Included with Azure, Microsoft 365, Dynamics 365, Intune, and Power Platform subscriptions.
- Cloud user and group management
- Unlimited SSO across SaaS apps
- Multifactor authentication
- Self-service password change for cloud users
- Directory sync from on-prem AD (Entra Connect)
- Basic reporting
Premium identity tier with conditional access, advanced group management, and identity governance basics.
- Conditional access
- Self-service password reset / writeback
- Advanced group management
- Application proxy
- Microsoft Identity Manager
Adds risk-based conditional access and identity protection.
- All P1 features
- Identity Protection (risk-based conditional access)
- Privileged Identity Management
- Access reviews
Combines Entra ID P1, ID Governance, Internet Access, Private Access, and Verified ID. Requires P1 (or a bundle that includes P1).
- Entra ID Governance
- Entra Internet Access
- Entra Private Access
- Entra Verified ID
Identity governance, lifecycle workflows, entitlement management, and access reviews.
- Lifecycle workflows
- Entitlement management
- Access reviews
SSE / SWG component of Microsoft's Security Service Edge.
- Internet access security
- Web filtering
ZTNA replacement for legacy VPN / Application Proxy.
- ZTNA private access to internal apps
- Per-app conditional access
Per workload identity (service principal / managed identity) with conditional access and lifecycle management.
- Conditional access for workload identities
- Identity Protection signals for workload identities
- Access reviews for service principals
Sources
- https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- https://learn.microsoft.com/en-us/entra/
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for plans
4 MCP tools reach this
find_plansBrowse and filter every plan in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
curl "https://apis.io/api/v1/plans/active-directory-plans-pricing"curl "https://apis.io/api/v1/plans?limit=25"Discovery needs no key. Ratings and market analysis are Pro.