Microsoft Entra ID might seem like an unfamiliar name on this list. In fact, it’s actually just a new name for Microsoft’s Azure Active Directory. The new service was launched towards the end of 2023.
This is slightly different from other options on this list, as there’s a good chance you already have it. Any organization using Windows 11, Microsoft 365, or Azure services will effectively already have access to a basic Microsoft Entra ID package.
That’s because it acts as an extension of the existing identity and access management functionality all Microsoft customers already use to log in and authenticate.
Microsoft Entra ID Capabilities:
- Access control permissions
- Compliance management*
- Password management
- Access management
- Credential management
- Single sign on
- Authentication
- Multi-factor authentication
- User management
Pros:
- Windows integrations – Microsoft Entra ID works well with other Microsoft technologies, making this an attractive choice for Windows-based organizations.
- Basic package – Microsoft offers a free package to all users and paid tiers to extend the functionality. This makes it easier to get started with these tools.
- Cloud security policies –Microsoft’s security tools work well for cloud and hybrid organizations. Users cite multi-factor authentication, conditional access policies, and password management as effective tools in this product.
Cons:
- Confusing features – It’s not instantly clear which features are available in different tiers of this product. Users may also struggle to work out how the different tiers interact with the Microsoft 365 and E5 packages – and by extension what features they already have and which they still need.
- User interface – Some users find the layout and UI of Entra ID less straightforward than third-party competitors.
- Microsoft only – Entra ID is an extension of the basic technology that all Microsoft 365, Windows, or Azure customers use. Non-Microsoft users will likely therefore find it less useful, and potentially confusing.
Microsoft Entra ID Pricing:
Microsoft Entra ID’s pricing information is publicly available on their website. The service includes three basic tiers of pricing model:
- Microsoft Entra ID Free: Free
This is effectively Microsoft’s default PAM suite, included as standard with cloud services like Microsoft Azure and Microsoft 365. It comes with basic authentication, single sign on, multi-factor authentication, and event logging capabilities.
- Microsoft Entra ID P1: $6.00 /user/month
The next tier up is available as a standalone product or included with a subscription to either Microsoft 365 E3 or Microsoft 365 Business Premium. Generally, it features more sophisticated versions of features from the free tier.
- Microsoft Entra ID P2: $9.00 /user/month
The premium tier includes advanced versions of most PAM features. Compared with P1, it includes more sophisticated end-user self-service and extra identity protection controls such as risk-based conditional access.
Customers of the Entra ID’s P1 and P2 tiers can also purchase a separate add-on:
*Microsoft Entra ID Governance: $7.00 /user/month
This is an advanced set of privileged access management capabilities to govern auditing and compliance. It adds extra features to Entra ID’s existing toolset, including an identity governance dashboard, lifecycle workflows, entitlement management with verified ID, and more.
