Microsoft Entra Identity Protection
Identity threat detection and response (ITDR) software
User threat prevention software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if Microsoft Entra Identity Protection and its alternatives fit your requirements.
$9.00 per user per month
Free Trial
Free version unavailable
Small
Medium
Large
- Information technology and software
- Media and communications
- Professional services (engineering, legal, consulting, etc.)
What is Microsoft Entra Identity Protection
Microsoft Entra Identity Protection is an identity security capability within Microsoft Entra ID that detects and investigates identity-related risks such as suspicious sign-ins and potentially compromised user accounts. It is used by identity and security teams to monitor risk signals, review detections, and automate responses through risk-based policies. The product integrates with Entra Conditional Access to enforce controls like MFA, password reset, or sign-in blocking based on calculated user and sign-in risk. It is designed primarily for organizations standardizing on Microsoft Entra ID for workforce identity.
Native Entra Conditional Access actions
It connects risk detections directly to Conditional Access policies, enabling automated enforcement (for example, require MFA, force password change, or block access). This reduces the need to route identity risk decisions through separate security tooling for common response patterns. The tight coupling with Entra ID sign-in flows makes it practical for real-time access control use cases.
Built-in identity risk detections
It provides out-of-the-box detections for sign-in risk and user risk, with investigation views that help analysts understand why a risk was raised. The detections are centered on identity events (authentication and account behavior) rather than general endpoint or network telemetry. This focus aligns with ITDR programs that prioritize account compromise and anomalous authentication activity.
Operational fit for Microsoft tenants
It is administered in the same ecosystem as Entra ID, which can simplify deployment and operations for organizations already using Microsoft identity services. Security teams can use a consistent identity data model and policy framework rather than integrating multiple identity control planes. This can shorten time-to-policy for common workforce identity scenarios compared with adding a separate identity security platform.
Best for Entra ID identities
Its strongest coverage is for identities authenticating through Microsoft Entra ID; it is not a general-purpose identity security layer for all identity providers. Organizations with significant non-Microsoft identity infrastructure may need additional tools or integrations to achieve consistent detection and response across environments. This can create gaps or duplicated processes in mixed-IdP architectures.
Licensing and feature gating
Key capabilities are typically tied to specific Microsoft Entra licensing tiers, which can complicate budgeting and entitlement management. Organizations may need to align identity security requirements with broader Microsoft licensing decisions. This can be a constraint compared with standalone products that package ITDR features independently.
Limited non-identity telemetry context
The product primarily uses identity and sign-in signals, so investigations may require additional security tools for endpoint, network, or SaaS activity context. For teams expecting a single console that correlates identity risk with broader security telemetry, this can increase analyst workflow steps. Response actions are strongest when they can be expressed as access controls rather than broader remediation.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| Microsoft Entra ID P2 | $9.00 per user/month (annual commitment, paid yearly) | Includes Microsoft Entra Identity Protection: risk-based conditional access, sign-in and user risk detection, security reports, and managed remediation. |
| Microsoft Entra Suite | $12.00 per user/month (annual commitment, paid yearly) | Suite includes Microsoft Entra Identity Protection plus Entra Private Access, Entra Internet Access, and Entra ID Governance (unified Zero Trust features). |
| Microsoft Entra ID P1 | $6.00 per user/month (annual commitment, paid yearly) | Does NOT include Microsoft Entra Identity Protection (P1 provides conditional access and other baseline premium features but not ID Protection). |
| Microsoft 365 E5 (includes Entra ID P2 capabilities) | Included with Microsoft 365 E5 license (see Microsoft 365 E5 pricing) | Microsoft Entra Identity Protection is also included as part of Microsoft 365 E5 licensing (contact sales for Microsoft 365 E5 pricing). |
Seller details
Microsoft Corporation
Redmond, Washington, United States
1975
Public
https://www.microsoft.com/
https://x.com/Microsoft
https://www.linkedin.com/company/microsoft/
