Microsoft Entra ID P1 [New Commerce Experience]
Microsoft Entra ID P1
Microsoft Entra ID P1 is the paid identity tier that makes Conditional Access available. Alongside it come multifactor authentication, dynamic group membership, role-based access control, self-service password reset including writeback to an on-premises directory, Application Proxy for internal web applications, and single sign-on across cloud and on-premises resources. The boundary worth knowing is the one above it: Microsoft Entra ID Protection, risk-based Conditional Access, Privileged Identity Management, access reviews and entitlement management are all P2 features and are not in P1. P1 is included in Microsoft 365 Business Premium and in Microsoft 365 E3.
What it is
Microsoft Entra ID P1 is the first paid tier of Microsoft's identity and access management service. Its defining capability is Conditional Access, which the free tier does not have.
Who it is for
Organisations that need to control access to Microsoft 365 and other applications by conditions such as user, device state and location, and that operate either fully in the cloud or across cloud and on-premises directories.
Key capabilities
- Conditional Access policies
- Multifactor authentication
- Dynamic group membership and self-service group management
- Role-based access control for administrative roles, and administrative units
- Self-service password reset, including writeback to an on-premises directory
- Application Proxy for on-premises web applications
- Single sign-on across cloud and on-premises applications
What is not included
P1 does not include Microsoft Entra ID Protection, and therefore does not include risk-based Conditional Access. It also does not include Privileged Identity Management, access reviews, entitlement management or the wider identity governance features. Those are Microsoft Entra ID P2.
Where it is already included
Microsoft Entra ID P1 is part of Microsoft 365 Business Premium and Microsoft 365 E3. Buying it standalone applies to organisations on plans that do not carry it, such as Microsoft 365 Business Basic or Business Standard.
Do I need Entra ID P1 for Conditional Access?
Yes. Conditional Access requires Microsoft Entra ID P1. Customers with Microsoft 365 Business Premium licences can also use it, because Business Premium includes Entra ID P1.
Does P1 include risk-based Conditional Access?
No. Risk-based Conditional Access depends on Microsoft Entra ID Protection, which is a P2 feature. P1 covers Conditional Access policies based on conditions such as user, device and location.
What does P2 add over P1?
Microsoft Entra ID Protection with risk-based Conditional Access, Privileged Identity Management, access reviews, entitlement management and identity governance.
Is Entra ID P1 already included in my Microsoft 365 plan?
It is included in Microsoft 365 Business Premium and Microsoft 365 E3. It is not included in Microsoft 365 Business Basic or Business Standard, which is where the standalone licence applies.
Does P1 cover self-service password reset for hybrid users?
Yes. Password reset with writeback to an on-premises directory requires Microsoft Entra ID P1, P2 or Microsoft 365 Business Premium. It is not supported on Microsoft 365 Business Basic or Business Standard.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- Unit price
- €4.90 /mo
- SKU
- MST-NCE-121-C100
Term or edition paths Microsoft allows this subscription to move to.
Attachable SKUs from the same category. Check each add-on's prerequisites for base-licence eligibility.
- 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
- 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
- 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Pax8 wholesale, margin in the price
Microsoft Defender Vulnerability Management Add-on (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management add-on is available to Defender for Endpoint Plan 2 customers to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.
Microsoft Entra ID P1 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P1 provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises. Built for ease of use, Microsoft Entra ID P1 features multi-factor authentication (MFA); access control based on device health, user location, and identity; and holistic security reports, audits,
Microsoft Entra ID P2 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P2 includes all the capabilities of P1 plus advanced identity protection features such as Identity Protection, which helps detect potential vulnerabilities affecting your organization’s identities, and Privileged Identity Management, which helps manage, control, and monitor access within your organiz
Microsoft Defender Vulnerability Management (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management standalone is a comprehensive vulnerability management solution to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.