Intune and Azure AD Licensing

Home > Microsoft Intune > Intune and Azure AD Licensing

Intune and Azure AD Licensing

Microsoft Intune Licensing

Microsoft Intune is available under the following licenses:

• Microsoft Intune (standalone)
• Microsoft 365 E3/E5
• Enterprise Mobility + Security (EMS) E3/E5
• Microsoft 365 Business Premium (for SMBs)

Each of these licenses includes:

• Mobile Device Management (MDM)
• Mobile Application Management (MAM)
• App protection policies
• Compliance policies
• Conditional access (with Azure AD Premium)

Azure AD Licensing Tiers

Azure Active Directory has different tiers:

1. Azure AD Free

• Basic user and group management
• Single sign-on (SSO) for up to 10 apps
• Limited reporting and security features

2. Azure AD Premium P1

• Dynamic groups
• Conditional Access
• Self-service password reset (SSPR)
• Hybrid Azure AD Join
• Microsoft Intune integration

3. Azure AD Premium P2

• All features in P1
• Identity Protection
• Privileged Identity Management (PIM)
• Risk-based conditional access

Common Bundles

• Microsoft 365 E3 includes Azure AD Premium P1 and Intune
• Microsoft 365 E5 includes Azure AD Premium P2 and Intune
• EMS E3 = Azure AD P1 + Intune
• EMS E5 = Azure AD P2 + Intune

Notes

• Azure AD Premium is required for Conditional Access and Dynamic Device Groups.
• To manage and deploy policies to Windows 11 devices via Intune, Azure AD join or Hybrid Azure AD join is required.

Home > Microsoft Intune > Intune and Azure AD Licensing