Skip to content
Microsoft logo
Microsoft

Microsoft Entra Suite [New Commerce Experience]

SecuritySaaSMonthly1-Year
SKU MST-NCE-9ES-C100

Microsoft Entra Suite

The Microsoft Entra Suite brings five products together: Microsoft Entra Private Access, Microsoft Entra Internet Access, Microsoft Entra ID Governance, Microsoft Entra ID Protection and the premium capabilities of Microsoft Entra Verified ID. It requires a Microsoft Entra ID P1 subscription, or a plan that includes one, and it is included in Microsoft 365 E7. The detail worth knowing before comparing it against P2: the Suite carries Microsoft Entra ID Protection, which is otherwise a P2 feature, so it is a second route to risk-based Conditional Access from a P1 base rather than an addition on top of P2.

What it is

The Microsoft Entra Suite is a single subscription covering identity governance, identity protection and network access. It builds on Microsoft Entra ID, which supplies the directory, authentication and policy layer underneath every service in it.

What is in it

  • Microsoft Entra Private Access, connecting remote users to private applications on-premises or across clouds without a legacy VPN
  • Microsoft Entra Internet Access, an identity-centric secure web gateway for internet, SaaS and Microsoft 365 traffic
  • Microsoft Entra ID Governance, covering entitlement management, access reviews, lifecycle workflows and Privileged Identity Management
  • Microsoft Entra ID Protection, risk detection on users and sign-ins, and risk-based Conditional Access
  • Microsoft Entra Verified ID, premium capabilities

Requirements

A Microsoft Entra ID P1 subscription, or a plan that includes P1 such as Microsoft 365 E3, Business Premium, F1 or F3. Licences are assigned to users and groups through the Microsoft 365 admin center.

Where it already exists

Microsoft 365 E7 includes the Entra Suite. On E7 this subscription adds nothing.

How to think about it against Entra ID P2

They overlap rather than stack. Microsoft Entra ID Protection and Privileged Identity Management are P2 capabilities, and the Suite carries both, so a P1 customer reaches risk-based Conditional Access and just-in-time privilege through either route. The Suite adds what P2 does not have at all: the two network access products, and the advanced governance capabilities beyond what P2 carries. Work out which of those five you will actually deploy before comparing it against P2.

Features
Microsoft Entra Private Access for private applications
Microsoft Entra Internet Access secure web gateway
Microsoft Entra ID Governance
Microsoft Entra ID Protection and risk-based Conditional Access
Microsoft Entra Verified ID premium capabilities
Requires Microsoft Entra ID P1 or a plan that includes it
Included in Microsoft 365 E7
Use cases
Replacing a legacy VPN for access to internal applications
Reaching risk-based Conditional Access from a Microsoft Entra ID P1 base
Running access reviews and entitlement packages you can evidence
Filtering internet and SaaS traffic through an identity-aware gateway
FAQ
What does the Microsoft Entra Suite include?

Five products: Microsoft Entra Private Access, Microsoft Entra Internet Access, Microsoft Entra ID Governance, Microsoft Entra ID Protection, and the premium capabilities of Microsoft Entra Verified ID.

Do I need Microsoft Entra ID P1 as well?

Yes. The Suite requires a Microsoft Entra ID P1 subscription or a plan that includes one, such as Microsoft 365 E3, Business Premium, F1 or F3. It builds on Entra ID rather than replacing it.

Is it worth buying on top of Microsoft Entra ID P2?

They overlap. Identity Protection and Privileged Identity Management are P2 capabilities and the Suite carries both, so the Suite is a second route to them rather than a layer on top. What it genuinely adds beyond P2 is the two network access products and the advanced governance capabilities.

Is it already included in any Microsoft 365 plan?

Yes, in Microsoft 365 E7. On E7 the standalone Suite adds nothing.

Can I buy just one of the five products?

Yes. Entra ID Governance, Private Access and Internet Access are each sold on their own, so a single requirement does not force the whole Suite.

Plan details
Vendor
Microsoft
Category
Security
Type
SaaS
Billing
Monthly
Commitment
1-Year
Available terms
1-Year, Monthly
Unit price
€10.80 /mo
SKU
MST-NCE-9ES-C100
How buying works
  1. 1You prepay through ITSailor (Malta) — VAT handled, reverse-charge for valid EU VAT IDs.
  2. 2We provision through Pax8 wholesale into your Microsoft tenant — no third-party MSP markup.
  3. 3You keep the tenant. Sovereign by default — every engagement closes with an Exit Kit.
Microsoft NCE termsNew Commerce Experience applies: within 7 days of activation you may cancel or reduce seats (pro-rated). After day 7 the subscription is committed for the term. We mirror this verbatim — no surprises.
Your price
Term
Billing cycle
€10.50/mo
Pax8 suggested retail €10.923% off Pax8 suggested retail
Quantity
1
Ask a question

Pax8 wholesale, margin in the price

More in Security
Add-on
Microsoft

Microsoft Defender Vulnerability Management Add-on (Education Student Pricing) [New Commerce Experience]

Microsoft Defender Vulnerability Management add-on is available to Defender for Endpoint Plan 2 customers to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.

€0.28/mo
SecurityEDU
SaaS
Microsoft

Microsoft Entra ID P1 (Education Student Pricing) [New Commerce Experience]

Microsoft Entra ID P1 provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises. Built for ease of use, Microsoft Entra ID P1 features multi-factor authentication (MFA); access control based on device health, user location, and identity; and holistic security reports, audits,

€0.28/mo
SecurityEDU
SaaS
Microsoft

Microsoft Entra ID P2 (Education Student Pricing) [New Commerce Experience]

Microsoft Entra ID P2 includes all the capabilities of P1 plus advanced identity protection features such as Identity Protection, which helps detect potential vulnerabilities affecting your organization’s identities, and Privileged Identity Management, which helps manage, control, and monitor access within your organiz

€0.42/mo
SecurityEDU
SaaS
Microsoft

Microsoft Defender Vulnerability Management (Education Student Pricing) [New Commerce Experience]

Microsoft Defender Vulnerability Management standalone is a comprehensive vulnerability management solution to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.

€0.42/mo
SecurityEDU