SaaS or Paas

Question

Hello,

I came across Microsoft Entra ID- two different offerings - PaaS and SaaS.

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/azure-ad-define?source=recommendations

Here it says: Microsoft Entra ID is also used by software as a service (SaaS) applications such as Microsoft 365 and Azure Marketplace

But here it says: https://learn.microsoft.com/en-us/training/modules/understand-azure-active-directory/2-examine-azure-active-directory

Microsoft Entra ID is part of the platform as a service (PaaS) offering and operates as a Microsoft-managed directory service in the cloud.

Question: Is Microsoft Entra ID used both as PaaS and SaaS or just one?

Please explain

Marouf

Answer 1

Hello @Marouf Ali .

Thank you for sharing your issue on Microsoft Q&A.

I understand you want to know if Microsoft Entra ID is regarded as PAAS and SAAS.

Microsoft Entra ID (formerly Azure Active Directory) serves as both Platform as a Service (PaaS) and Software as a Service (SaaS), depending on the context in which it is used. Here’s the breakdown:

Microsoft Entra ID as a PaaS Offering

• PaaS Role: When described as a cloud-based directory and identity management service, Microsoft Entra ID functions as a Platform as a Service (PaaS).
  • It provides an identity management infrastructure for developers to build and deploy applications.
  • Features such as authentication, single sign-on (SSO), and token-based access enable developers to integrate identity management capabilities into their applications without building them from scratch.
  • It is Microsoft-managed, meaning the platform abstracts away the underlying infrastructure while offering APIs and services developers can use.
  • Examples:
    • Integrating identity management in custom applications.
    • Using Microsoft Graph API to query Entra ID for programmatic identity management.

Microsoft Entra ID as a SaaS Offering

• SaaS Role: When described as the identity provider used by SaaS applications like Microsoft 365 or Azure Marketplace, Microsoft Entra ID functions as a Software as a Service (SaaS).
  • In this scenario, it is consumed as a ready-to-use service for identity management by end-users or IT administrators.
  • Organizations rely on it to provide SSO, multi-factor authentication (MFA), and secure access to SaaS apps (e.g., Office 365).
  • It’s delivered as a fully managed service with no customization or infrastructure concerns required from the user.
  • Examples:
    • Administering user access to Microsoft 365 apps.
    • Enabling SSO for third-party SaaS apps integrated with Entra ID.

Summary: Dual Nature

• Microsoft Entra ID operates as PaaS when it provides tools, APIs, and infrastructure for developers to build identity-aware solutions.
• It operates as SaaS when organizations use it as an out-of-the-box identity service for applications like Microsoft 365 or third-party SaaS tools.

Both descriptions in the documentation are correct; the distinction lies in how the service is consumed:

• Developers and integrators → PaaS
• End-users and IT admins → SaaS

Please let me know if you need further assistance.

Siri