Clarification on Intune and Entra ID in Microsoft 365 F1

Question

I noticed on the Microsoft site that Microsoft 365 F1 mentions Entra ID and Intune. Does F1 actually include Entra ID Plan 1, Intune Plan 1 and Conditional Access by default, or do we need to purchase EMS E3 or other add-ons for these features?

Answer 1

Hello,

Yes, Microsoft 365 F1 includes Microsoft Entra ID Plan 1 and Microsoft Intune Plan 1, so you get Conditional Access without buying EMS E3 or other add ons. Conditional Access requires Entra ID P1, which F1 already provides, so you can create and enforce CA policies under F1.

You only need EMS E3 or additional add ons if you want Entra ID P2 capabilities or Intune Plan 2 or Suite features beyond the Plan 1 baseline included with F1.

Answer 2

Microsoft 365 F1 includes Microsoft Entra ID Plan 1 by default, but it does not include Intune Plan 1 or Conditional Access features. To access Intune Plan 1 and Conditional Access, you would need to purchase additional licenses such as Enterprise Mobility + Security (EMS) E3 or other add-ons.

---

References:

• Microsoft Intune licensing
• Microsoft Entra service description