Azure Active Directory (Azure AD) comes in 4 editions:

  1. Free
  2. Basic
  3. Premium P1
  4. Premium P2
FREE BASIC PREMIUM P1 PREMIUM P2
Common Features
Directory Objects 500,000 Object Limit No Object Limit No Object Limit No Object Limit
User/Group Management (add/update/delete)/ User-based provisioning, Device registration  Yes  Yes  Yes  Yes
Single Sign-On (SSO) 10 apps per user (pre-integrated SaaS and developer-integrated apps) 10 apps per user (free tier + Application proxy apps) No Limit (free, Basic tiers +Self-Service App Integration templates) No Limit (free, Basic tiers +Self-Service App Integration templates)
B2B Collaboration  Yes  Yes  Yes  Yes
Self-Service Password Change for cloud users  Yes  Yes  Yes  Yes
Connect (Sync engine that extends on-premises directories to Azure Active Directory)  Yes  Yes  Yes  Yes
Security/Usage Reports 3 Basic Reports 3 Basic Reports Advanced Reports Advanced Reports
Premium + Basic Features
Group-based access management/provisioning  Yes  Yes  Yes
Self-Service Password Reset for cloud users  Yes  Yes  Yes
Company Branding (Logon Pages/Access Panel customization)  Yes  Yes  Yes
Application Proxy  Yes  Yes  Yes
SLA  Yes  Yes  Yes
Premium Features
Self-Service Group and app Management/Self-Service application additions/ Dynamic Groups  Yes  Yes
Self-Service Password Reset/Change/Unlock with on-premises writeback  Yes  Yes
Device objects two-way synchronization between on-premises directories and Azure AD (Device write-back)  Yes  Yes
Multi-Factor Authentication (Cloud and On-premises (MFA Server))  Yes  Yes
Microsoft Identity Manager user CAL  Yes  Yes
Cloud App Discovery  Yes  Yes
Connect Health  Yes  Yes
Automatic password rollover for group accounts  Yes  Yes
Conditional Access based on group and location  Yes  Yes
Conditional Access based on device state (Allow access from managed devices)  Yes  Yes
Identity Protection  Yes
Privileged Identity Management  Yes
Azure Active Directory Join – Windows 10 only features
Join a device to Azure AD, Desktop SSO, Windows Hello for Azure AD, Administrator Bitlocker recovery  Yes  Yes  Yes  Yes
MDM auto-enrollment, Self-Service Bitlocker recovery, Additional local administrators to Windows 10 devices via Azure AD Join, Enterprise State Roaming  Yes  Yes
Advertisements