Microsoft Entra Plans Pricing
Microsoft Entra is the identity and network-access product family (formerly Azure Active Directory). Pricing is per-user-per-month with annual commitment for the core ID tiers (Free, P1, P2, Suite, Governance) and per-workload-identity for Workload ID. Internet Access and Private Access are per-user add-ons. External ID is free for the first 50,000 monthly active users.
Microsoft Entra Plans Pricing is the machine-readable pricing-plan profile for Microsoft Entra on the APIs.io network, conforming to the API Commons Plans specification.
It defines 10 plans, covering freemium, subscription, and usage-based tiers, with named plans including Microsoft Entra ID Free, Microsoft Entra ID P1, Microsoft Entra ID P2, Microsoft Entra Suite, Microsoft Entra ID Governance, and 5 more.
Tagged areas include Identity, Access Management, Single Sign-On, Conditional Access, and Microsoft.
Plans
Included with Microsoft cloud subscriptions (Azure, Microsoft 365, Dynamics 365). User and group management, single sign-on, B2B collaboration, and basic security reports.
- User and group management
- Single sign-on for SaaS apps
- B2B collaboration
- Security defaults
Adds conditional access, dynamic groups, self-service password reset with writeback, Microsoft Identity Manager. $6.00/user/month, paid yearly.
- Conditional Access
- Self-service password reset with writeback
- Dynamic groups
- Microsoft Identity Manager
P1 plus risk-based Conditional Access, Privileged Identity Management, Identity Protection. $9.00/user/month, paid yearly. Included with Microsoft 365 E5.
- Risk-based Conditional Access
- Privileged Identity Management
- Microsoft Entra Identity Protection
- Access reviews
Bundles Entra ID Governance, Internet Access, Private Access, ID Protection, and Verified ID. $12.00/user/month, paid yearly. Requires Entra ID P1 (P2 / E5 customers receive bundle pricing).
- ID Governance
- Internet Access
- Private Access
- ID Protection
- Verified ID
Entitlement management, access reviews, lifecycle workflows. $7.00/user/month, paid yearly. Requires P1 or P2.
- Entitlement management
- Access reviews
- Lifecycle workflows
- Separation of duties
Identity-centric SWG for Microsoft 365 and SaaS apps. $5.00/user/month, paid yearly.
- Universal Conditional Access
- Identity-aware SWG
- Microsoft 365 traffic optimisation
Identity-based ZTNA for private apps. $5.00/user/month, paid yearly.
- Identity-based ZTNA
- Per-app Conditional Access
- Quick Access for legacy apps
Conditional Access, risk detection, and lifecycle for service principals / managed identities. $3.00/workload-identity/month, paid yearly.
- Conditional Access for workload identities
- Risk detection for service principals
- Access reviews for app permissions
Customer identity (CIAM). First 50,000 monthly active users free; additional MAU billed via Azure consumption.
- Custom branding
- User flows
- Multi-factor auth (SMS / email OTP)
- Identity providers (Google, Facebook, SAML)
Decentralised identity verification. Included with any Entra ID subscription. Face Check premium add-on billed separately.
- Issue verifiable credentials
- Verify credentials
- Open standards (W3C VC, DID)
Sources
- https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- https://learn.microsoft.com/en-us/entra/
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.