Azure Active Directory pricing
Identity and access management for the cloud
- No upfront cost
- No termination fees
- Pay only for what you use
Microsoft Azure Active Directory is a comprehensive identity and access management cloud solution that combines core directory services, application access management, and advanced identity protection.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Germany is available to customers and partners who have already purchased this, doing business in the European Union (EU), the European Free Trade Association (EFTA), and in the United Kingdom (UK). It provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure trial.
Pricing details
Azure Active Directory comes in four editions—Free, Office 365 apps, Premium P1, and Premium P2. The Free edition is included with a subscription of a commercial online service, e.g. Azure, Dynamics 365, Intune, and Power Platform. Office 365 subscriptions include the Free edition, but Office 365 E1, E3, E5, F1 and F3 subscriptions also include the features listed under the Office 365 apps column. The Premium editions are available through your Microsoft representative, the Open Volume License Program, and the Cloud Solution Providers program. Azure and Office 365 subscribers can also buy Azure Active Directory Premium P1 and P2 online. Sign in here to purchase.
| Free | Office 365 apps | Premium P1 | Premium P2 | |
|---|---|---|---|---|
| Core Identity and Access Management | ||||
| Directory Objects1 | 500,000 Object Limit | No Object Limit | No Object Limit | No Object Limit |
| Single Sign-On (SSO) (unlimited)2 | ||||
| User provisioning | ||||
| Federated Authentication (ADFS or 3rd party IDP) | ||||
| User and group management (add/update/delete) | ||||
| Device registration | ||||
| Cloud Authentication (Pass-Through Auth, Password Hash sync, Seamless SSO) | ||||
| Azure AD Connect sync (extend on-premises directories to Azure AD) | ||||
| Self-Service Password Change for cloud users | ||||
| Azure AD Join: desktop SSO & administrator bitlocker recovery | ||||
| Password Protection (global banned password) | ||||
| Multi-Factor Authentication3 | ||||
| Basic security and usage reports | ||||
| Business to Business Collaboration | ||||
| Azure AD features for guest users4 | ||||
| Identity & Access Management for Office 365 apps | ||||
| Company branding (customization of logon & logout pages, access panel) | ||||
| Self-service password reset for cloud users | ||||
| Service Level Agreement (SLA) | ||||
| Device write-back (device objects two-way synchronization between on-premises directories and Azure) | ||||
| Premium Features | ||||
| Password Protection (custom banned password) | ||||
| Password Protection for Windows Server Active Directory (global & custom banned password) | ||||
| Self-service password reset/change/unlock with on-premises write-back | ||||
| Group access management | ||||
| Microsoft Cloud App Discovery5 | ||||
| Azure AD Join: MDM auto enrollment & local admin policy customization | ||||
| Azure AD Join: self-service bitlocker recovery, enterprise state roaming | ||||
| Advanced security and usage reports | ||||
| Hybrid Identities | ||||
| Application Proxy | ||||
| Microsoft Identity Manager user CAL6 | ||||
| Connect Health7 | ||||
| Advanced Group Access Management | ||||
| Dynamic groups | ||||
| Group creation permission delegation | ||||
| Group naming policy | ||||
| Group expiration | ||||
| Usage guidelines | ||||
| Default classification | ||||
| Conditional Access | ||||
| Conditional Access based on group, location, and device status | ||||
| Azure Information Protection integration | ||||
| SharePoint limited access | ||||
| Terms of Use (set up terms of use for specific access) | ||||
| Multi-Factor Authentication with Conditional Access | ||||
| Microsoft Cloud App Security integration | ||||
| 3rd party identity governance partners integration | ||||
| Identity Protection | ||||
| Vulnerabilities and risky accounts detection | ||||
| Risk events investigation | ||||
| Risk based Conditional Access policies | ||||
| Identity Governance | ||||
| Privileged Identity Management (PIM) | ||||
| Access Reviews | ||||
| Entitlement Management | ||||
| Price | Free | O365 E1, E3, E5, F1, F3 | $6 user/month | $9 user/month |
Premium P1
Designed to empower organizations with more demanding identity and access management needs, Azure Active Directory Premium edition adds feature-rich enterprise-level identity management capabilities and enables hybrid users to seamlessly access on-premises and cloud capabilities. This edition includes everything you need for information worker and identity administrators in hybrid environments across application access, self-service identity and access management (IAM), and security in the cloud.
| Microsoft Representative | Online | |
|---|---|---|
| Price | Contact your Microsoft representative | $6 user/month* |
Premium P2
Azure Active Directory Premium P2 includes every feature of all other Azure Active Directory editions enhanced with advanced identity protection and privileged identity management capabilities.
| Microsoft Representative | Online | |
|---|---|---|
| Price | Contact your Microsoft representative | $9 user/month* |
Support & SLA
- Technical support for Azure Active Directory Free and Premium is available through Azure Support, starting at $29/month. Billing and account management support is provided at no cost.
- Service Level Agreement (SLA): Azure Active Directory Premium editions guarantee a 99.9% monthly availability. Free services, such as Azure Active Directory Free, don’t have an SLA. For more details, visit the Azure SLA page.
FAQs
-
You will need an Azure or Office 365 subscription. You can use an existing subscription or set up a new one and then sign in to the Office 365 portal with your credentials to buy Azure AD licenses. This video explains how.
-
To manage your Azure Active Directory Premium P1 or P2, or Enterprise Mobility & Security licenses, sign in here with your credentials.
-
Enterprise Mobility & Security E3 licenses include Azure Active Directory Premium P1, and Enterprise Mobility & Security E5 licenses include Azure Active Directory Premium P2.