Azure Active Directory pricing

¹ Default usage quota is 50,000 objects. An object is an entry in the directory service, represented by its unique distinguished name. An example of an object is a user entry used for authentication purposes. If you need to exceed this default quota, please contact support. The 500K object limit does not apply for Office 365, Microsoft Intune or any other Microsoft paid online service that relies on Azure Active Directory for directory services.

² With Azure AD Free end users who have been assigned access to SaaS apps can get SSO access to up to 10 apps. Admins can configure SSO and change user access to different SaaS apps, but SSO access is only allowed for 10 apps per user at a time. All Office 365 apps are counted as one app. For P1 and P2 self-service integration of any application supporting SAML, SCIM, or forms-based authentication by using templates provided in the application gallery menu. For more details, please read this article.

³ Authentication methods and configuration capabilities may vary by subscription, please see the documentation for more details.

⁴ Azure AD enables the use of Azure AD features for guest users who are invited into the Azure AD tenant to collaborate. For each paid Azure AD license that you own in your tenant, you can invite up to 5 guest users to the tenant. For additional guests beyond the 5th one you will need to purchase additional Azure AD paid licenses to cover the ratio required. The features you can extend to guest users must match paid Azure AD license editions i.e.1 Azure AD P1 license enables you to invite up to 5 guest users to use P1 capabilities. If guest user requires use of a P2 capability, an Azure AD P2 license is required.

⁵ To access the cloud app discovery features go to https://portal.cloudappsecurity.com/ and log in with your Azure AD P1 credentials. Azure AD P2 customers will not need to enter credentials and will be automatically redirected.

⁶ Microsoft Identity Manager Server software rights are granted with Windows Server licenses (any edition). Since Microsoft Identity Manager runs on Windows Server OS, as long as the server is running a valid, licensed copy of Windows Server, then Microsoft Identity Manager can be installed and used on that server. No other separate license is required for Microsoft Identity Manager Server.

⁷ First monitoring agent requires at least one license. Each additional agent requires 25 additional incremental licenses. Agents monitoring AD FS, AD Connect, and AD DS are considered separate agents.