Microsoft Azure Active Directory Plans Pricing
Microsoft Entra ID (formerly Azure Active Directory) is licensed per user per month, on top of a Free baseline included with Microsoft cloud subscriptions. P1 and P2 add advanced security and identity protection; the Entra Suite bundles network access, governance, and verification on top of P1/P2. External ID, Workload ID, Internet/Private Access, ID Governance, and Verified ID are sold as standalone add-ons.
Microsoft Azure Active Directory Plans Pricing is the machine-readable pricing-plan profile for Microsoft Azure Active Directory on the APIs.io network, conforming to the API Commons Plans specification.
It defines 9 plans, covering freemium, subscription, and usage-based tiers, with named plans including Microsoft Entra ID Free, Microsoft Entra ID P1, Microsoft Entra ID P2, Microsoft Entra Suite, Microsoft Entra Internet Access, and 4 more.
Tagged areas include Authentication, Authorization, Identity, Microsoft Entra, and OAuth.
Plans
Included at no cost with Microsoft cloud subscriptions (Azure, Microsoft 365). Provides MFA, unlimited SSO across SaaS apps, and basic reports.
- Multifactor authentication
- Unlimited SSO across SaaS apps
- Basic reports
- Self-service password change for cloud users
Advanced identity management for hybrid environments with conditional access, MFA, and self-service password management. Annual commitment.
- Conditional access
- Multifactor authentication
- Self-service password reset for hybrid identities
- Application proxy
Adds identity protection (risk-based conditional access, real-time threat assessment) and Privileged Identity Management. Annual commitment.
- Identity Protection (risk-based conditional access)
- Privileged Identity Management
- Access reviews
- All P1 features
Bundle combining network access, identity protection, governance, and verification. Requires P1 or P2 subscription.
- Microsoft Entra Internet Access
- Microsoft Entra Private Access
- Microsoft Entra ID Governance
- Microsoft Entra Verified ID premium
- Microsoft Entra ID Protection
Standalone secure web gateway / SSE component.
- SaaS access controls
- Web content filtering
- Threat protection
Standalone identity-centric ZTNA for private apps.
- ZTNA for private apps
- Per-app conditional access
- Identity-aware proxy
Standalone identity governance with entitlement management, access reviews, and lifecycle workflows.
- Entitlement management
- Lifecycle workflows
- Access reviews
Identity for service principals, managed identities, and workload identities.
- Conditional access for workload identities
- Identity Protection for workloads
- Access reviews for workload identities
CIAM for customers and partners. Free up to 50,000 monthly active users; usage-priced thereafter (see Azure pricing page).
- CIAM for customer-facing apps
- Custom branding
- Social and federated identity providers
Sources
- https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- https://azure.microsoft.com/en-us/pricing/details/active-directory/
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.