Questions? Feedback? powered by Olark live chat software
Skip Navigation

Azure Active Directory Pricing

Identity and access management for the cloud

Azure Active Directory is a comprehensive, highly available identity and access management cloud solution that combines core directory services, advanced identity governance, and application access management. Azure Active Directory also offers a rich, standards-based platform that enables developers to deliver access control to their applications, based on centralized policy and rules.

Pricing details

Azure Active Directory comes in four editions: Free, Basic, Premium P1 and Premium P2. The Free edition is included with an Azure subscription. The Basic and Premium editions are available through a Microsoft Enterprise Agreement, the Open Volume License Program, and the Cloud Solution Providers program. Azure and Office 365 subscribers can also buy Azure Active Directory Basic and Premium P1 and P2 online. Sign in here to purchase.

Free Basic Premium P1 Premium P2
Common Features Directory Objects 1 500,000 Object Limit No Object Limit No Object Limit No Object Limit
User/Group Management (add/update/delete)/ User-based provisioning, Device registration
Single Sign-On (SSO) 10 apps per user2 (pre-integrated SaaS and developer-integrated apps) 10 apps per user2 (free tier + Application proxy apps) No Limit (free, Basic tiers +Self-Service App Integration templates5) No Limit (free, Basic tiers +Self-Service App Integration templates5)
Self-Service Password Change for cloud users
Connect (Sync engine that extends on-premises directories to Azure Active Directory)
Security/Usage Reports 3 Basic Reports 3 Basic Reports Advanced Reports Advanced Reports
Premium + Basic Features Group-based access management/provisioning
Self-Service Password Reset for cloud users
Company Branding (Logon Pages/Access Panel customization)
Application Proxy
SLA
Premium Features Self-Service Group and app Management/Self-Service application additions/ Dynamic Groups
Self-Service Password Reset/Change/Unlock with on-premises writeback
Multi-Factor Authentication (Cloud and On-premises (MFA Server)) --3 --3
Microsoft Identity Manager user CAL4
Cloud App Discovery
Connect Health
Automatic password rollover for group accounts
Conditional Access based on group and location (Preview)
Conditional Access based on device state (Allow access from managed devices)
+ Intune license

+ Intune license
Identity Protection
Privileged Identity Management
Azure Active Directory Join – Windows 10 only features
Join a device to Azure AD, Desktop SSO, Microsoft Passport for Azure AD, Administrator Bitlocker recovery
MDM auto-enrollment, Self-Service Bitlocker recovery, Additional local administrators to Windows 10 devices via Azure AD Join, Enterprise State Roaming

1 Default usage quota is 150,000 objects. An object is an entry in the directory service, represented by its unique distinguished name. An example of an object is a user entry used for authentication purposes. If you need to exceed this default quota, please contact support. The 500K object limit does not apply for Office 365, Microsoft Intune or any other Microsoft paid online service that relies on Azure Active Directory for directory services.

2 With Azure AD Free and Azure AD Basic, end users who have been assigned access to SaaS apps can get SSO access to up to 10 apps. Admins can configure SSO and change user access to different SaaS apps, but SSO access is only allowed for 10 apps per user at a time.

3 Multi-Factor Authentication is available for Azure AD Free and Azure AD Basic, when you create a Multi-Factor Authentication Provider by the 'per user' or 'per authentication' billing/usage model.

4 Microsoft Identity Manager Server software rights are granted with Windows Server licenses (any edition). Since Microsoft Identity Manager runs on Windows Server OS, as long as the server is running a valid, licensed copy of Windows Server, then Microsoft Identity Manager can be installed and used on that server. No other separate license is required for Microsoft Identity Manager Server.

5 Self-service integration of any application supporting SAML, SCIM, or forms-based authentication by using templates provided in the application gallery menu. For more details, please read this article.

Basic

Designed for task workers with cloud-first needs, this edition provides cloud centric application access and self-service identity management solutions. With the Basic edition of Azure Active Directory, you get productivity enhancing and cost reducing features like group-based access management, self-service password reset for cloud applications, and Azure Active Directory Application Proxy (to publish on-premises web applications using Azure Active Directory), all backed by an enterprise-level SLA of 99.9 percent uptime.

Enterprise Agreement Online
Price Contact your Enterprise Agreement representative $1 user/ month*

*Annual commitment

Premium P1

Designed to empower organizations with more demanding identity and access management needs, Azure Active Directory Premium edition adds feature-rich enterprise-level identity management capabilities and enables hybrid users to seamlessly access on-premises and cloud capabilities. This edition includes everything you need for information worker and identity administrators in hybrid environments across application access, self-service identity and access management (IAM), and security in the cloud.

Enterprise Agreement Online
Price Contact your Enterprise Agreement representative $6 user/ month*

*Annual commitment

Premium P2

Azure Active Directory Premium P2 includes every feature of all other Azure Active Directory editions enhanced with advanced identity protection and privileged identity management capabilities

Enterprise Agreement Online
Price Contact your Enterprise Agreement representative $9 user/ month*

*Annual commitment

Azure AD Access Control

Azure AD Access Control is free.

Already have Azure Active Directory Premium? Manage your licenses here.

Support & SLA

  • Technical support for Azure Active Directory Free, Basic, and Premium is available through Azure Support, starting at $29/month. Billing and subscription management support is provided at no cost.
  • Service Level Agreement (SLA): Azure Active Directory Basic and Premium editions guarantee a 99.9% monthly availability. Free services, such as Azure Active Directory Free and Access Control, don’t have an SLA. For more details, visit the Azure SLA page.

Resources

Protect your business with Azure Active Directory Premium

Start today