Microsoft Entra Suite
Zero Trust identity and network access in one bundle
In this guide
Browse all plans
What the Entra Suite Is
The Entra Suite is Microsoft’s Zero Trust bundle for identity and network access. It takes the pieces that used to be bought individually — secure web access, private app access, identity verification, governance — and puts them behind one price.
💡 Plain English: Entra ID P1 and P2 answer “is this person who they say they are, and should they get in?” The Entra Suite adds “and what can they reach once they’re in, and how do we prove it later?”
What’s Included
| Component | What It Does |
|---|---|
| Entra Internet Access | Secure access to internet and SaaS apps — web filtering, threat protection |
| Entra Private Access | Zero Trust access to internal apps without a traditional VPN |
| Entra Verified ID (premium) | Verifiable digital credentials, including high-assurance identity checks |
| Entra ID Protection | Risk-based sign-in and user risk policies |
| Entra ID Governance | Access reviews, entitlement management, lifecycle workflows |
What It Costs
| Item | Price |
|---|---|
| Entra Suite | $12/user/month (annual commitment) |
| Entra Internet Access alone | about $5/user/month |
| Entra Private Access alone | about $5/user/month |
| Entra ID P1 (prerequisite) | $7/user/month if not already licensed |
The bundle is normally the cheaper route. Buying just the two network access components already gets you to about $10 before you’ve added Verified ID or Governance.
⚠️ Prerequisite: The Suite sits on top of Entra ID P1. If you’re on Microsoft 365 E3 or E5 you already have P1, so this is a clean $12 add-on. If you’re not, budget for P1 as well.
Where It Fits Against E5 and E7
This is the part people get wrong most often:
| Plan | What You Get on Identity |
|---|---|
| Microsoft 365 E3 | Entra ID P1 |
| Microsoft 365 E5 | Entra ID P2 — PIM, Identity Protection, access reviews |
| Microsoft 365 E7 | The full Entra Suite, included |
E5 does not include the Entra Suite. P2 is a genuinely strong identity licence, but it doesn’t cover Internet Access or Private Access. If you want those on E5, you’re adding the Suite on top — or moving to E7, which bundles it along with Copilot and Agent 365.
💡 Worth doing the maths: E5 ($60) + Copilot ($30) + Entra Suite ($12) + Agent 365 ($15) comes to $117/user. E7 at $99 is $18 less for the same four pieces. If you’re buying three or more of them, check E7 before committing.
Frequently Asked Questions
1. How much does the Microsoft Entra Suite cost?
The Entra Suite is $12 per user per month on an annual commitment. It requires Entra ID P1 as a prerequisite, which most Microsoft 365 E3 and E5 customers already have.
2. What is included in the Entra Suite?
Entra Internet Access and Entra Private Access (the two Zero Trust network access components), Entra Verified ID premium features, Entra ID Protection, and Entra ID Governance.
3. Does Microsoft 365 E5 include the Entra Suite?
No. E5 includes Entra ID P2, which covers Privileged Identity Management, Identity Protection, and access reviews — but not the network access components or the full Suite. Microsoft 365 E7 is the only M365 plan that includes the complete Entra Suite.
4. Is the Suite cheaper than buying the parts?
Usually yes. Entra Internet Access and Entra Private Access are around $5 per user per month each, so the two network components alone get you to about $10 — and adding Verified ID premium, ID Protection, and ID Governance separately pushes past the $12 bundle.
5. Do I need Entra ID P1 first?
Yes. The Suite builds on P1 rather than replacing it. If you are on Microsoft 365 E3 or E5 you almost certainly have P1 already, so the Suite is a straight $12 add-on.