What this plan gives you
Identity & access
- Entra ID P1 (Conditional Access, SSO) Conditional access, self-service and single sign-on.
- Entra ID P2 (Identity Protection, PIM) Risk-based access and privileged identity management.
- Multi-factor authentication Standalone Azure MFA.
Devices & management
- Intune (full device management) Full device and app management (MDM/MAM) for PCs and mobile.
Threat protection
- Defender for Cloud Apps Cloud access security broker (CASB).
- Defender for Identity On-prem identity threat detection.
Information protection & compliance
- Information protection & encryption Rights management, sensitivity encryption and message encryption.
Technical detail: the 10 underlying service plans
| Service (friendly) | Internal name | Capability |
|---|---|---|
| AZURE INFORMATION PROTECTION PREMIUM P2 | RMS_S_PREMIUM2 | Information protection & encryption |
| Azure Rights Management | RMS_S_ENTERPRISE | Information protection & encryption |
| Exchange Foundation for Government | EXCHANGE_S_FOUNDATION_GOV | — |
| Microsoft Azure Multi-Factor Authentication | MFA_PREMIUM | Multi-factor authentication |
| MICROSOFT CLOUD APP SECURITY | ADALLOM_S_STANDALONE | Defender for Cloud Apps |
| MICROSOFT DEFENDER FOR IDENTITY | ATA | Defender for Identity |
| Microsoft Entra ID P1 | AAD_PREMIUM | Entra ID P1 (Conditional Access, SSO) |
| Microsoft Entra ID P2 | AAD_PREMIUM_P2 | Entra ID P2 (Identity Protection, PIM) |
| Microsoft Entra RIGHTS | RMS_S_PREMIUM | Information protection & encryption |
| Microsoft Intune | INTUNE_A | Intune (full device management) |