How to purchase Microsoft Entra ID

Edgar Jones 0 Reputation points
2026-05-11T19:48:14.55+00:00

Describe the ways I can use to purchase a copy of Microsoft Entra ID to build a cybersecurity lab?

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kristen-L 15,650 Reputation points Microsoft External Staff Moderator
    2026-05-11T20:58:38.08+00:00

    Hi @Edgar Jones,

    Thank you for reaching out regarding how to purchase Microsoft Entra ID for building a cybersecurity lab environment.

    It’s important to note that Microsoft Entra ID isn’t purchased as a traditional software “copy.” Instead, it is a cloud-based (SaaS) identity service, and access is provided through licensing within a tenant that you create or already own.

    Below are several approaches you can consider, depending on your lab requirements:

    Choose the right licensing tier (Free vs P1 vs P2):

    For cybersecurity labs, the features you need will determine the license:

     

    Option 1: Use a Microsoft 365 Developer Program E5 sandbox (if eligible)

    Microsoft offers the ability to create a development and testing environment through the Microsoft 365 Developer Program, which provides an E5 sandbox tenant preconfigured with users and services.

    This sandbox environment typically includes Entra ID P2 licenses, making it especially useful for advanced lab scenarios such as Identity Protection and Privileged Identity Management (PIM).

    Please note that eligibility requirements apply. Access to the Developer Program generally requires a qualifying subscription or membership, such as certain Visual Studio subscriptions, partner programs, or support plans.

    Reference: Microsoft Entra Verified ID developer information.

     

    Option 2: Create a free Azure account (start with pay-as-you-go)

    You can begin by creating a free Azure account, which allows you to set up a Microsoft Entra ID tenant at no initial cost. Charges only apply when you upgrade to pay-as-you-go or use services beyond the free limits.

    Additionally, if you don’t yet have a paid Microsoft 365 or Entra subscription, you can start with a free Entra ID instance and later upgrade to a paid plan when needed.

    For more information:

     

    Option 3: Purchase Entra ID P1 or P2 standalone licenses (most direct option)

    For a stable, long-term lab, purchasing standalone licenses is the most straightforward approach. You can obtain these licenses through several routes:

    • Route A – Existing Azure or Microsoft 365 subscription : Add premium Entra ID licenses directly to your current subscription and manage them within your tenant.
    • Route B – Enterprise Mobility + Security (EMS) : EMS bundles include Entra ID P1 or P2 (depending on E3/E5), making them a good choice if your lab also involves device management or Intune scenarios.
    • Route C – Volume Licensing : Suitable for organizations or classroom environments needing multiple licenses.

    Once purchased, you’ll:

    • Add licenses to your tenant
    • Assign them to lab users (individually or via groups)
    • Enable features like Conditional Access and PIM in the Entra admin center.

    For reference:

     

    Option 4: Get Entra ID through a Microsoft 365 bundle

    Instead of purchasing standalone licenses, you can choose a Microsoft 365 plan that includes Entra ID:

    • Entra ID P1 is included in plans such as Microsoft 365 E3, F1, F3, and Business Premium
    • Entra ID P2 is included in Microsoft 365 E5 and certain Microsoft Defender suites

    This is often the simplest option if your lab also requires productivity or security tools like Teams, Exchange, or endpoint protection.

    Reference:

     

    Option 5: Purchase via a Microsoft Partner (CSP)

    You can also obtain licenses through a Microsoft Partner or Cloud Solution Provider (CSP). This is especially helpful in regions where direct online purchasing may be limited.

    Partners can:

    • Provide localized pricing
    • Assist with tenant setup
    • Help assign and manage licenses.

     

    Suggested approach for you:

    • If you’re looking for the richest lab experience at minimal cost: The Microsoft 365 Developer Program (E5 sandbox) is a great option, provided you meet the eligibility requirements.
    • If you’re setting up a personal lab and don’t have access to the Developer Program: You can create a free Entra tenant and use a P2 trial (or Entra Suite trial) for short-term learning and experimentation.
    • If you need a long-term, stable lab environment: Consider purchasing Entra ID P2 as a standalone license for identity-focused scenarios, or choose a broader plan like Microsoft 365 E5 if your lab also requires services such as Teams and Exchange.

     

    I hope this information helps you plan your lab setup effectively. If you have any follow-up questions or need help deciding which option fits your scenario best, please feel free to reach out.

    As other users will also search for information in this community, your vote can significantly help those with similar inquiries quickly locate the most relevant resources. 

    Thank you for your kindness and for contributing to the forum.   

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".       

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

    Was this answer helpful?

  2. AI answer

    2026-05-11T19:48:47.1733333+00:00

    Microsoft Entra ID is included with several Microsoft subscriptions and can also be obtained as a standalone premium edition (P1 or P2). For a cybersecurity lab, there are three main ways to get it, depending on whether a lab is for learning/testing or for production.

    1. Use a free trial (best for short-term labs)
    • Sign up for a Microsoft Entra ID P2 trial using the “Microsoft Entra ID P2 Trial” option described in the sign-up guidance.
    • This associates Microsoft Entra ID P2 with an Azure subscription so premium features can be tested in a lab tenant.
    • Reference: The overview for premium editions explains that Entra ID P1 or P2 can be purchased and associated with an Azure subscription and points to the trial option.
    1. Purchase via an existing Azure or Microsoft 365 subscription
    • If there is already an Azure or Microsoft 365 subscription:
      • Purchase Microsoft Entra ID P1 or P2 online through that subscription. The licenses are then activated in the same directory.
      • Follow the “Sign up using your existing Azure or Microsoft 365 subscription” path described in the premium sign-up article, which directs to the “Buy or remove licenses” process.
    • This is suitable if the lab is built in an existing tenant and there is a need for persistent premium capabilities (Conditional Access, ID Protection, etc.).
    1. Use suites that include Microsoft Entra ID (for broader security labs)
    • Microsoft Entra ID P1 and P2 are included in several broader security suites, which can be used as the basis for a cybersecurity lab:
      • Microsoft Entra ID P1 is included with:
        • Microsoft 365 E3, F1, F3
        • Enterprise Mobility + Security (EMS) E3
        • Microsoft 365 Business Premium
      • Microsoft Entra ID P2 is included with:
        • Microsoft 365 E5
        • Microsoft Defender Suite (formerly Microsoft 365 E5 Security)
        • Microsoft Defender Suite FLW
        • Microsoft Defender + Purview Suite FLW
        • Enterprise Mobility + Security E5
        • Microsoft Defender Suite for Microsoft 365 Business Premium
        • Microsoft Defender and Purview Suites for Microsoft 365 Business Premium
    • For lab scenarios focused on Zero Trust and identity security, the Microsoft Entra Suite can be used. It requires an Entra ID P1 subscription and combines:
      • Microsoft Entra Private Access
      • Microsoft Entra Internet Access
      • Microsoft Entra ID Governance
      • Microsoft Entra ID Protection
      • Microsoft Entra Verified ID (premium capabilities)
    • These suites can be obtained via:
      • Existing Azure or Microsoft 365 subscriptions (as above)
      • Enterprise Mobility + Security plans (E3/E5)
    1. Obtain Entra ID via Enterprise Mobility + Security (EMS)
    • For a lab focused on identity and device security, EMS is a common route:
      • EMS is a suite that includes Microsoft Entra ID P1 or P2, Azure Information Protection, and Microsoft Intune.
      • If EMS licenses already exist, Entra ID can be used directly in the lab.
      • If not, EMS E3 or EMS E5 can be purchased as described in the EMS sign-up options.
    1. Use Microsoft Volume Licensing (for larger lab/classroom environments)
    • For multi-user labs (e.g., training classrooms or larger test environments), Microsoft Entra ID P1 or P2 can be obtained through Volume Licensing:
      • For 250 or more licenses: use a Microsoft Enterprise Agreement.
      • For 5–250 licenses: use Open Volume License.
    • These options are described in the premium sign-up article under “Sign up using your Microsoft Volume Licensing plan.”
    1. Use Microsoft 365 Developer Program for a free E5 sandbox (learning labs)
    • For individual learning labs, the Microsoft 365 Developer Program offers a free renewable Microsoft 365 E5 instant sandbox (if qualified).
    • This sandbox includes Microsoft 365 E5 capabilities, which in turn include Microsoft Entra ID P2, and can be used to build and test cybersecurity scenarios.
    1. Trial Microsoft Entra Suite for Zero Trust access labs
    • For labs focused on unified Zero Trust access (network + identity), the Microsoft Entra Suite trial can be used:
      • Prerequisites: Microsoft Entra ID P1 or any package that includes Entra ID P1 or P2 (for example, ME3 or ME5).
      • The trial user guide explains that the suite extends Conditional Access across identities and network controls, suitable for testing secure access to cloud and on-premises apps in a lab.

    Summary for a cybersecurity lab

    • Short-term or personal learning lab:
      • Use the Microsoft Entra ID P2 trial and/or join the Microsoft 365 Developer Program for a free E5 sandbox.
    • Persistent lab in an existing tenant:
      • Purchase Entra ID P1 or P2 via an existing Azure or Microsoft 365 subscription, or use EMS E3/E5 or Microsoft 365 E3/E5 that already include Entra ID.
    • Larger or advanced Zero Trust lab:
      • Use EMS or Microsoft Entra Suite (trial or paid) and, if needed, Volume Licensing for multiple lab users.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.