What this plan gives you
Identity & access
- Entra ID P1 (Conditional Access, SSO) Conditional access, self-service and single sign-on.
- Entra ID P2 (Identity Protection, PIM) Risk-based access and privileged identity management.
- Multi-factor authentication Standalone Azure MFA.
Threat protection
- Defender for Cloud Apps Cloud access security broker (CASB).
Technical detail: the 5 underlying service plans
| Service (friendly) | Internal name | Capability |
|---|---|---|
| Exchange Foundation | EXCHANGE_S_FOUNDATION | — |
| Microsoft Azure Multi-Factor Authentication | MFA_PREMIUM | Multi-factor authentication |
| Microsoft Defender for Cloud Apps Discovery | ADALLOM_S_DISCOVERY | Defender for Cloud Apps |
| Microsoft Entra ID P1 | AAD_PREMIUM | Entra ID P1 (Conditional Access, SSO) |
| Microsoft Entra ID P2 | AAD_PREMIUM_P2 | Entra ID P2 (Identity Protection, PIM) |