specification: API Commons Plans
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/Plans
provider: Azure Active Directory (Microsoft Entra ID)
providerId: azure-ad
generated: '2026-09-06'
method: searched
source: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
created: '2026-05-04'
modified: '2026-09-06'
supersedes: >-
  The 2026-05-04 bulk-sweep scaffold, which invented a 1,000-requests/month free
  quota and per-request prices. Microsoft prices Entra ID per user per month, not
  per API call. Replaced with the published tiers.
description: >-
  Microsoft Entra ID is licensed per user (or per workload identity) per month on
  an annual commitment, not per API request. Microsoft Graph access to the
  directory is included with the tenant licence; there is no separate,
  metered price for the identity API surface itself. Prices below are the
  published US list prices read from Microsoft's own pricing page on 2026-09-06.
currency: USD
billing_period: month
commitment: annual (paid yearly)
metered_api: false
metered_note: >-
  The only metered identity API Microsoft prices separately is the Microsoft Entra
  SCIM 2.0 Provisioning API
  (https://azure.microsoft.com/en-us/pricing/details/entraid/scimapi/); the Graph
  directory endpoints are included with the tenant licence and governed by
  throttling limits rather than by a paid quota.
plans:
  - id: entra-id-free
    name: Microsoft Entra ID Free
    type: free
    price: '0.00'
    currency: USD
    period: month
    unit: user
    description: >-
      Multifactor authentication, unlimited SSO across any SaaS app, basic
      reports, and self-service password change for cloud users.
    sla: none
  - id: entra-id-p1
    name: Microsoft Entra ID P1
    type: paid
    price: '7.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
    description: >-
      Multifactor Authentication, Single Sign-On, Conditional Access,
      Role-based access control (RBAC), Advanced group management.
  - id: entra-id-p2
    name: Microsoft Entra ID P2
    type: paid
    price: '10.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
    description: >-
      Everything in P1 plus identity protection — risk-based conditional access
      and real-time dynamic sign-in assessment. Required for Privileged Identity
      Management (PIM) data.
  - id: entra-suite
    name: Microsoft Entra Suite
    type: paid
    price: '12.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
    requires: Microsoft Entra ID P1 subscription
    description: >-
      Network access, identity protection, governance and identity verification
      solutions bundled.
  - id: entra-id-governance
    name: Microsoft Entra ID Governance
    type: paid
    price: '7.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
    description: >-
      Entitlement management, access reviews, lifecycle workflows and privileged
      access governance. Licence gate for the 2,390 Identity.Governance
      operations in openapi/_original/azure-ad-graph-identity-governance-openapi.yml.
  - id: entra-workload-id
    name: Microsoft Entra Workload ID
    type: paid
    price: '3.00'
    currency: USD
    period: month
    unit: workload identity
    commitment: paid yearly
    description: Identity and access management for applications and services rather than people.
  - id: entra-internet-access
    name: Microsoft Entra Internet Access
    type: paid
    price: '5.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
  - id: entra-private-access
    name: Microsoft Entra Private Access
    type: paid
    price: '5.00'
    currency: USD
    period: month
    unit: user
    commitment: paid yearly
  - id: entra-external-id
    name: Microsoft Entra External ID
    type: freemium
    price: '0.00'
    currency: USD
    period: month
    unit: monthly active user
    description: Free for the first 50,000 monthly active users; usage-priced beyond that.
    url: https://azure.microsoft.com/en-us/pricing/details/microsoft-entra-external-id/
  - id: entra-verified-id
    name: Microsoft Entra Verified ID
    type: included
    price: '0.00'
    currency: USD
    period: month
    description: >-
      Included with any Microsoft Entra ID subscription; Face Check is a premium
      add-on priced separately.
plan_count: 10
free_tier: true
enterprise_only: false