Pricing and Subscription required for setting up MFA for my Active Directory

Devendra singh Khurana 26 Reputation points

I manage an active directory system and aim to implement Multi-Factor Authentication (MFA) for user security. I'm considering Azure Entra ID as the solution. However, after reviewing documentation, it appears that enabling MFA necessitates a P1 or P2 subscription.

The estimated cost for a P1 subscription is roughly $6 per user monthly. With 5000 users, this would amount to approximately $30,000. Could you confirm if my understanding regarding the cost is accurate?

Additionally, I'm seeking advice on any alternative, more cost-effective methods to achieve MFA implementation for this scale of users within my active directory system. Any insights or suggestions would be greatly appreciated.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,521 questions
0 comments No comments
{count} votes

Accepted answer
  1. Domooney-MSFT 2,576 Reputation points Microsoft Employee

    Hi @Devendra singh Khurana

    Thank you for posting your query on Microsoft QnA!

    There are some options for MFA when using the Entra ID free tier, specifically "Security Defaults" which would allow your users to use the Microsoft Authenticator application, but not SMS and Phone options.

    We have some details on the various licensing options here -

    Also note that Entra ID provides MFA for cloud based applications, so you would need to integrate your on-prem apps with Entra if you wish to utilize MFA. We have some guidance on this here -

    Let me know if you have any further queries and I would be happy to help.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 additional answers

Sort by: Most helpful