Azure Active Directory Plans Pricing
Microsoft Entra ID (formerly Azure Active Directory) is sold per-user-per-month as four tiers - Free (included with any Microsoft cloud service), Microsoft Entra ID P1, Microsoft Entra ID P2, and Microsoft Entra ID Governance. Add-on SKUs include Microsoft Entra Workload ID, External ID (B2C/B2B with monthly active user pricing), Verified ID, and Internet Access / Private Access.
Azure Active Directory Plans Pricing is the machine-readable pricing-plan profile for Microsoft Azure Active Directory on the APIs.io network, conforming to the API Commons Plans specification.
It defines 6 plans, covering freemium, subscription, and usage-based tiers, with named plans including Microsoft Entra ID Free, Microsoft Entra ID P1, Microsoft Entra ID P2, Microsoft Entra ID Governance, Microsoft Entra External ID, and 1 more.
Tagged areas include Authentication, Authorization, Identity, Microsoft, and Microsoft Entra.
Plans
Included free with every Azure, Microsoft 365, Power Platform, and Dynamics 365 subscription. Up to 50,000 directory objects (300,000 with verified domain).
- User and group management
- SSO to thousands of SaaS apps (limited)
- B2B collaboration
- Self-service password change for cloud users
- Security defaults / MFA via security defaults
Premium identity and access management. $6 per user/month.
- Conditional Access
- SaaS SSO unlimited
- Self-service password reset for hybrid users
- Application Proxy
- Cloud App Discovery
- Microsoft Entra Connect Health
P1 features plus risk-based identity protection and PIM. $9 per user/month.
- Identity Protection (risk-based Conditional Access)
- Privileged Identity Management (PIM)
- Access Reviews
- All P1 features
Identity lifecycle, entitlement management, and access reviews. $7 per user/month add-on (in addition to P1/P2).
- Entitlement management
- Lifecycle workflows
- Access certifications / reviews
- Separation of duties
Customer/partner identity (CIAM). Billed by Monthly Active Users (MAU) with a 50,000-MAU free tier.
- B2C / customer identity flows
- Custom branding
- Social and local accounts
Conditional Access, identity protection, and lifecycle for service principals / managed identities.
- Conditional Access for workloads
- Workload ID risk detection
- Access reviews for service principals
Sources
- https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- https://learn.microsoft.com/en-us/entra/fundamentals/licensing
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.