Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.

Download Microsoft Edge More information Get to know Azure Global infrastructure Cloud economics Customer enablement Customer stories Microsoft Azure Data Manager for Agriculture Reference architectures Resources for accelerating growth Azure Marketplace Customer enablement Azure Partner Zone Azure technology partners Join ISV Success

Azure Active Directory (Azure AD) External Identities is a cloud-based IAM solution that secures and manages customers and partners beyond your organizational boundaries. Built on an enterprise-grade secure platform, Azure AD External Identities is a highly-available global service scaling to millions of identities.

Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month fall on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the upcoming month. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.

US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.

Learn more

US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.

Learn more

Azure AD External Identities pricing is based on Monthly Active Users (MAU), helping you to reduce costs and forecast with confidence. Benefit from a free tier and flexible, predictable pricing for external users:

  • Free goes further: Your first 50,000 MAUs per month are free for both Premium P1 and Premium P2 features.
  • Flexible: Connect with customers and partners based on the usage and features you need, rather than the licenses you have.
  • Predictable: Pay only for what you use. Forecast with ease as your business and usage scales. Customers are not charged for a MAU’s subsequent authentications or for storing inactive users within that calendar month.
  • Azure AD External Identities is billed starting at the following rates, including for Enterprise Agreement customers. Premium P2 features include all the Premium P1 features and market-leading Identity Protection and Identity Governance controls, such as risk-based Conditional Access policies and Identity Protection reporting for Azure AD B2C.

    Separate Charges

    A flat fee of $- is billed for each SMS/Phone-based multi-factor authentication attempt.

    Go-Local data residency

    You can elect to have your Azure AD Core Store data and Azure AD components and service data stored in the eligible countries/regions .

    This is a paid add-on to Azure B2C P1 & P2. It requires an additional charge of $- per monthly active user.

    Connect with us directly

    Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimization and request a custom proposal.

    Talk to a sales specialist

    See ways to purchase

    Purchase Azure services through the Azure website, a Microsoft representative, or an Azure partner.

    Explore your options How is multi-factor authentication (MFA) billed?
    If you choose to provide higher levels of assurance using Multi-Factor Authentication (MFA) for Voice and SMS, you will continue to be charged a worldwide flat fee of $- for each MFA attempt that month, whether the log in is successful or unsuccessful. The worldwide flat rate provides greater predictability, by removing the price variations for SMS messages that are dependent on the telecom carrier or destination phone number. For example, if you have 100 monthly active users (MAUs) who make two MFA attempts that month, you would be billed $- , in addition to your usage: 100 MAUs x 2 MFA attempts/each = 200 MFA attempts x $- /attempt = $-
    Do I need to have an Azure AD Premium P2 license to enable Premium P2 features for my external users?
    No, you are not required to purchase Premium P2 licenses for employees in order to provide External Identities at Premium P2 to external users. You may need to purchase at least one Azure AD Premium P2 license for your admin to enable and manage Premium P2 features.
    Why does Azure AD External Identities use a MAU-based billing model?

    We worked closely with our customers to develop flexible, predictable, and cost-efficient billing that reflects the usage and features you need, rather than the licenses you have.

    With 50,000 free MAU at every tier, the vast majority of customers are able to use Azure AD External Identities for free. Incremental pricing for our Premium P1 and Premium P2 features enables organizations the flexibility to offer world-class security to any user, without needing to purchase more Azure AD licenses. All customers benefit from more accurate forecasting, with predictable month-to-month charges.

    Who is considered a “monthly active user” (MAU)?
    A monthly active user (MAU) is a unique user that performs an authentication within a given month. For example, a user that authenticates multiple times within a given month is counted as one MAU. Customers are not charged for a MAU’s subsequent authentications during the month, nor for inactive users.
  • Active, interactive login by the user;
  • Passive, non-interactive login (such as single sign-on, sign-up, sign-in, token refresh, and password change)
  • Additional operations that are counted as an authentication include: login to a portal; redeeming an invitation; authenticating to perform an admin action; and when an application exchanges a refresh token for a new identity token or access token for that user.