Skip to main content

Azure Active Directory External Identities pricing

Consumer identity and access management in the cloud

Azure Active Directory (Azure AD) External Identities is a cloud-based IAM solution that secures and manages customers and partners beyond your organizational boundaries. Built on an enterprise-grade secure platform, Azure AD External Identities is a highly-available global service scaling to millions of identities.

Explore pricing options

Apply filters to customize pricing options to your needs.

Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month fall on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the upcoming month. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.

Azure AD External Identities pricing is based on Monthly Active Users (MAU), helping you to reduce costs and forecast with confidence. Benefit from a free tier and flexible, predictable pricing for external users:

  • Free goes further: Your first 50,000 MAUs per month are free for both Premium P1 and Premium P2 features.
  • Flexible: Connect with customers and partners based on the usage and features you need, rather than the licenses you have.
  • Predictable: Pay only for what you use. Forecast with ease as your business and usage scales. Customers are not charged for a MAU’s subsequent authentications or for storing inactive users within that calendar month.

Azure AD External Identities is billed starting at the following rates, including for Enterprise Agreement customers. Premium P2 features include all the Premium P1 features and market-leading Identity Protection and Identity Governance controls, such as risk-based Conditional Access policies and Identity Protection reporting for Azure AD B2C.

Premium P1 Premium P2
First 50,000 MAU $-/Monthly Active Users $-/Monthly Active Users
More than 50,000 MAU $-/Monthly Active Users $-/Monthly Active Users

Separate Charges

A flat fee of $- is billed for each SMS/Phone-based multi-factor authentication attempt.

Go-Local data residency

You can elect to have your Azure AD Core Store data and Azure AD components and service data stored in the eligible countries/regions.

This is a paid add-on to Azure B2C P1 & P2. It requires an additional charge of $- per monthly active user.

Azure pricing and purchasing options

Connect with us directly

Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimization and request a custom proposal.

Talk to a sales specialist

See ways to purchase

Purchase Azure services through the Azure website, a Microsoft representative, or an Azure partner.

Explore your options

Additional resources

Azure Active Directory External Identities

Learn more about Azure Active Directory External Identities features and capabilities.

Pricing calculator

Estimate your expected monthly costs for using any combination of Azure products.

SLA

Review the Service Level Agreement for Azure Active Directory External Identities.

Documentation

Review technical tutorials, videos, and more Azure Active Directory External Identities resources.

  • Read our documentation on how to set up your tenant for billing.
  • Only External Users, as defined by the Commercial Licensing Terms, are eligible for External Identities pricing. Internal employee users are not eligible and must have an Azure AD license.
  • If you choose to provide higher levels of assurance using Multi-Factor Authentication (MFA) for Voice and SMS, you will continue to be charged a worldwide flat fee of $- for each MFA attempt that month, whether the log in is successful or unsuccessful. The worldwide flat rate provides greater predictability, by removing the price variations for SMS messages that are dependent on the telecom carrier or destination phone number. For example, if you have 100 monthly active users (MAUs) who make two MFA attempts that month, you would be billed $-, in addition to your usage: 100 MAUs x 2 MFA attempts/each = 200 MFA attempts x $-/attempt = $-
  • All MAUs will be billed at the selected tier’s pricing. To learn about which features are suitable for your needs, please contact your partner or Microsoft representative.
  • No, you are not required to purchase Premium P2 licenses for employees in order to provide External Identities at Premium P2 to external users. You may need to purchase at least one Azure AD Premium P2 license for your admin to enable and manage Premium P2 features.
  • We worked closely with our customers to develop flexible, predictable, and cost-efficient billing that reflects the usage and features you need, rather than the licenses you have.

    With 50,000 free MAU at every tier, the vast majority of customers are able to use Azure AD External Identities for free. Incremental pricing for our Premium P1 and Premium P2 features enables organizations the flexibility to offer world-class security to any user, without needing to purchase more Azure AD licenses. All customers benefit from more accurate forecasting, with predictable month-to-month charges.

  • A monthly active user (MAU) is a unique user that performs an authentication within a given month. For example, a user that authenticates multiple times within a given month is counted as one MAU. Customers are not charged for a MAU’s subsequent authentications during the month, nor for inactive users.
  • Authentications may include:

    • Active, interactive login by the user;
    • Passive, non-interactive login (such as single sign-on, sign-up, sign-in, token refresh, and password change)

    Additional operations that are counted as an authentication include: login to a portal; redeeming an invitation; authenticating to perform an admin action; and when an application exchanges a refresh token for a new identity token or access token for that user.

  • Enterprise Agreement customers are eligible to switch to MAU-based billing, with 50,000 free MAU at any tier and a low, flat rate for incremental MAU. For more information, please contact your partner or Microsoft representative.

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Get free cloud services and a $200 credit to explore Azure for 30 days.

Added to estimate. Press 'v' to view on calculator
Can we help you?