Azure Active Directory is a comprehensive, highly available identity and access management cloud solution that combines core directory services, advanced identity governance and application access management. Azure Active Directory also offers a rich, standards-based platform that enables developers to deliver access control to their applications, based on centralised policy and rules.
Azure Government is available to US government entities to purchase physically and network isolated instances of Azure Government from a Licensed Azure Government Service Provider or Partner with no up-front financial commitment or fee. Or, you can sign up for a free Azure Government Trial.
Important: The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes and an eNF will not be issued.
Azure Germany is available to customers and partners doing business in the European Union (EU), European Free Trade Association (EFTA) and United Kingdom (UK), and provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure Germany trial.
Azure Active Directory is not available in the Central India region. Please select another region.
Azure Active Directory is not available in the West India region. Please select another region.
Azure Active Directory is not available in the South India region. Please select another region.
Azure Active Directory is not available in the UK West region. Please select another region.
Azure Active Directory is not available in the UK South region. Please select another region.
Azure Active Directory is not available in the Korea Central region. Please select another region.
Azure Active Directory is not available in the Korea South region. Please select another region.
Azure Active Directory is not available in the West US 2 region. Please select another region.
Azure Active Directory is not available in the West Central US region. Please select another region.
Azure Active Directory comes in four editions: Free, Basic, Premium P1 and Premium P2. The Free edition is included with an Azure subscription. The Basic and Premium editions are available through a Microsoft Enterprise Agreement, the Open Volume Licence Programme and the Cloud Solution Providers programme. Azure and Office 365 subscribers can also buy Azure Active Directory Basic, Premium P1 and Premium P2 online. Sign in here to purchase.
A proper licence is required if a user benefits directly or indirectly from any feature covered by that licence.
|Free||Basic||Premium P1||Premium P2|
|Directory Objects 1||500,000 Object Limit||No Object Limit||No Object Limit||No Object Limit|
|User/Group Management (add/update/delete)/User-based provisioning, Device registration|
|Single sign-on (SSO)||10 apps per user2 (pre-integrated SaaS and developer-integrated apps)||10 apps per user2 (free tier + application proxy apps)||No Limit (free, Basic tiers + Self-Service App Integration templates5)||No Limit (free, Basic tiers + Self-Service App Integration templates5)|
|B2B collaboration 7|
|Self-service Password Change for cloud users|
|Connect (sync engine that extends on-premises directories to Azure Active Directory)|
|Security/Usage Reports||3 Basic Reports||3 Basic Reports||Advanced Reports||Advanced Reports|
|Premium + Basic Features|
|Group-based access management/provisioning|
|Self-service Password Reset for cloud users|
|Company Branding (Login Pages/Access Panel Customisation)|
|Self-service group and app management/Self-service application additions/Dynamic groups|
|Self-service Password Reset/Change/Unlock with on-premises writeback|
|Device objects two-way synchronisation between on-premises directories and Azure AD (Device write-back)|
|Multi-Factor Authentication (Cloud and On-premises (MFA Server))||--3||--3|
|Microsoft Identity Manager user CAL4|
|Cloud App Discovery|
|Automatic password rollover for group accounts|
|Conditional access based on group and location|
|Conditional access based on device state (Allow access from managed devices)|
|Privileged Identity Management|
|Azure Active Directory Join – Windows 10-only features|
|Join a device to Azure AD, Desktop SSO, Windows Hello for Azure AD, Administrator Bitlocker recovery|
|MDM auto-enrolment, Self-service Bitlocker recovery, Additional local administrators to Windows 10 devices via Azure AD Join, Enterprise State Roaming|
Designed for task workers with cloud-first needs, this edition provides cloud-centric application access and self-service identity management solutions. With the Basic edition of Azure Active Directory, you get productivity enhancing and cost reducing features such as group-based access management, self-service password reset for cloud applications and Azure Active Directory Application Proxy (to publish on-premises web applications using Azure Active Directory), all backed by an enterprise-level SLA of 99.9 per cent uptime.
|Price||Contact your Enterprise Agreement representative||$1.0 user/month*|
Designed to empower organisations with more demanding identity and access management needs, Azure Active Directory Premium edition adds feature-rich enterprise-level identity management capabilities and enables hybrid users to seamlessly access on-premises and cloud capabilities. This edition includes everything you need for information worker and identity administrators in hybrid environments across application access, self-service identity and access management (IAM), and security in the cloud.
|Price||Contact your Enterprise Agreement representative||$6.0 user/month*|
Azure Active Directory Premium P2 includes every feature of all other Azure Active Directory editions enhanced with advanced identity protection and privileged identity-management capabilities.
|Price||Contact your Enterprise Agreement representative||$9.0 user/month*|
Azure AD B2B Collaboration
Azure AD allows B2B collaboration by enabling the use of a special set of Azure AD features to guest users who are invited to the Azure AD tenant. While some features are free, for any paid Azure AD features, guest users must be licensed as follows: with each Azure AD edition licence that you own for an employee or a non-guest user in your tenant, you will also be able to invite up to five guest users to the tenant. The features that you can extend to these guest users will depend on the type of Azure AD edition you purchase.
- There is no charge for inviting a guest user and assigning them to an application in Azure AD for up to ten apps per guest user. Other features of Azure AD Free edition, such as three basic reports, are also free for guest users.
- For paid Azure AD features that are extended to guest users, the inviting tenant will need the appropriate number of Basic or Premium P1 or Premium P2 licences to cover guest users in the ratio of one licence to five users as described above. For example, one Azure AD Basic licence will allow up to five guest users to be set up for Group-based Access Management and Provisioning. For the sixth guest user, you will need another Azure AD Basic licence. Similarly, one Azure AD Premium P1 licence will allow up to five guest users to use the Multi-factor authentication feature (as well as any Azure AD Basic features). For the sixth guest user who uses MFA, you will need a second Azure AD Premium P1 licence.
Azure AD Access Control
Azure AD Access Control is free.
Already have Azure Active Directory Premium? Manage your licences here.
Support and SLA
- Technical support for Azure Active Directory Free, Basic and Premium is available through Azure Support, starting at $29.0/month. Billing and subscription management support is provided at no cost.
- Service-level Agreement (SLA): Azure Active Directory Basic and Premium editions guarantee a 99.9% monthly availability. Free services, such as Azure Active Directory Free and Access Control, don’t have an SLA. For more details, visit the Azure SLA page.
To manage your Azure Active Directory Basic, Premium P1 or P2 or Enterprise Mobility + Security licences, sign in here with your credentials.
Enterprise Mobility + Security E3 licences include Azure Active Directory Premium P1, and Enterprise Mobility + Security E5 licences include Azure Active Directory Premium P2.