Authentication methods available for Primary Authentication in Microsoft Entra ID Free

Question

Authentication methods available for Primary Authentication in Microsoft Entra ID Free

U R 20

I am currently considering using the Microsoft Entra ID Free plan and have a question regarding authentication methods.

According to the following Microsoft documentation, there is a table that lists authentication methods and indicates whether they support “Primary authentication”:

https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication#authentication-methodssupported-by-microsoft-entra-id

Among the authentication methods in this table where “Primary authentication” is marked as “Yes”, which ones are available when using the Microsoft Entra ID Free plan?

Could you please list all authentication methods that can be used as primary authentication with the Entra ID Free plan?

Thank you in advance.

VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-16T09:32:39.67+00:00
Hello U R,

Microsoft explains authentication method availability through documentation and supported guidance rather than by listing methods per license tier.

Where this is stated and validated

The Authentication methods supported by Microsoft Entra ID documentation lists all authentication methods and indicates whether they support Primary authentication, without associating those methods with any specific license requirement. This means the methods shown as “Primary authentication: Yes” are usable for sign‑in by default, including in tenants using the Entra ID Free plan. https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication

The Microsoft Entra ID licensing documentation clearly calls out which capabilities do require P1 or P2 licenses (such as Conditional Access, authentication strengths, and Identity Protection). Authentication methods themselves are not listed as restricted features, which indicates they are included in the Free tier. https://learn.microsoft.com/en-us/entra/fundamentals/licensing
U R 20 Reputation points

2026-03-17T01:38:23.07+00:00

Hi VEMULA SRISAI

When considering using QR codes as the primary authentication method, this authentication method is supported only with Microsoft Entra ID P1 or higher plans. Therefore, wouldn't it be unavailable with the Free plan?

According to the following documentation: https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-qr-code#prerequisites-to-enable-the-qr-code-authentication-method
VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-19T10:52:24.2133333+00:00
U R Yes, your understanding is correct.

QR code authentication is not available with Microsoft Entra ID Free. This authentication method requires Microsoft Entra ID P1 or higher, either directly or through an eligible Microsoft 365 / EMS license.

Although the documentation lists multiple supported licenses (such as Microsoft 365 F1/F3, EMS E3/E5, Microsoft 365 E3/E5), all of these SKUs include Microsoft Entra ID P1 capabilities. Microsoft Entra ID Free alone does not include Conditional Access, which is required for QR code authentication.

Therefore:

Entra ID Free → Not supported

Entra ID P1/P2 or equivalent Microsoft 365 / EMS plans → Supported

The same licensing requirement also applies to SMS-based user sign-in
VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-20T08:39:44.9133333+00:00

U R I’m following up on my previous response to see if it helped. Please feel free to reach out if you need any further assistance.I’m happy to help

1 answer

Your answer

VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-16T09:32:39.67+00:00

Hello U R,

Microsoft explains authentication method availability through documentation and supported guidance rather than by listing methods per license tier.

Where this is stated and validated

The Authentication methods supported by Microsoft Entra ID documentation lists all authentication methods and indicates whether they support Primary authentication, without associating those methods with any specific license requirement. This means the methods shown as “Primary authentication: Yes” are usable for sign‑in by default, including in tenants using the Entra ID Free plan. https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication

The Microsoft Entra ID licensing documentation clearly calls out which capabilities do require P1 or P2 licenses (such as Conditional Access, authentication strengths, and Identity Protection). Authentication methods themselves are not listed as restricted features, which indicates they are included in the Free tier. https://learn.microsoft.com/en-us/entra/fundamentals/licensing
U R 20 Reputation points

2026-03-17T01:38:23.07+00:00

Hi VEMULA SRISAI

When considering using QR codes as the primary authentication method, this authentication method is supported only with Microsoft Entra ID P1 or higher plans. Therefore, wouldn't it be unavailable with the Free plan?

According to the following documentation: https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-qr-code#prerequisites-to-enable-the-qr-code-authentication-method
VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-19T10:52:24.2133333+00:00

U R Yes, your understanding is correct.

QR code authentication is not available with Microsoft Entra ID Free. This authentication method requires Microsoft Entra ID P1 or higher, either directly or through an eligible Microsoft 365 / EMS license.

Although the documentation lists multiple supported licenses (such as Microsoft 365 F1/F3, EMS E3/E5, Microsoft 365 E3/E5), all of these SKUs include Microsoft Entra ID P1 capabilities. Microsoft Entra ID Free alone does not include Conditional Access, which is required for QR code authentication.

Therefore:

Entra ID Free → Not supported

Entra ID P1/P2 or equivalent Microsoft 365 / EMS plans → Supported

The same licensing requirement also applies to SMS-based user sign-in
VEMULA SRISAI 11,330 Reputation points Microsoft External Staff Moderator

2026-03-20T08:39:44.9133333+00:00

U R I’m following up on my previous response to see if it helped. Please feel free to reach out if you need any further assistance.I’m happy to help

Answer 1

SUNOJ KUMAR YELURU 18,166 MVP Volunteer Moderator

Hello @U R,

The following authentication methods can be used as primary authentication with the Microsoft Entra ID Free plan:

Windows Hello for Business
Platform Credential for macOS
Passkey (FIDO2)
Passkey in Microsoft Authenticator
Synced passkey (preview)
Certificate-based authentication
Microsoft Authenticator passwordless
Microsoft Authenticator push notifications
Temporary Access Pass (TAP)
Short Message Service (SMS) sign-in
QR code
Password

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

U R 20 Reputation points

2026-03-16T00:10:01.9066667+00:00

Hi　SUNOJ KUMAR YELURU

Thank you for your response.

You mentioned that all items marked “Primary authentication: Yes” are available with the Free plan. Is there any place where it is stated that these authentication methods can be used with the Free plan?

Share via

Authentication methods available for Primary Authentication in Microsoft Entra ID Free

1 answer

Your answer