Identity Governance and Administration (IGA) Software
Microsoft Entra ID Governance: features, pricing and who it fits
Microsoft Entra ID Governance adds lifecycle workflows, entitlement management and access reviews to Entra ID P1 or P2 for $7.00 per user per month, paid yearly. Lifecycle workflows are capped at 50 per tenant, and Microsoft says new IGA features will go only to this add-on, not to P2.
Who Microsoft Entra ID Governance is for
Best for
- Microsoft 365 and Entra ID estates that want governance without a second vendor
- Organizations already on Entra ID P1 or P2 that need lifecycle workflows and advanced access reviews
Look elsewhere if
- Companies not on Entra ID, since an active P1 or P2 subscription is a prerequisite
- Buyers needing flexible audit and compliance reporting
Microsoft Entra ID Governance features
- Provisioning automation
- HR-driven inbound provisioning from Workday and SuccessFactors, lifecycle workflows, and SCIM, LDAP and SQL provisioning to hundreds of apps
- Access reviews and certification
- Recurring access reviews with machine-learning assisted recommendations, inactive-user reviews and catalog access reviews
- Role management
- Entitlement management access packages with auto-assignment policies; docs describe migrating an organizational role model, no role mining
- Segregation of duties controls
- Incompatible access packages enforce separation of duties on requests (listed from Entra ID P2)
- Integrations and connectors
- Connectors to hundreds of cloud and on-premises apps via SCIM, LDAP, SQL, SOAP and REST; SAP IAG business roles in preview
- Compliance and audit reporting
- Governance dashboard (P1 and up); audit logs
- Pricing model
- $7.00 per user per month on top of Entra ID P1 or P2; guests billed per monthly active user
- Target company size
- Microsoft-centric organizations from mid-market to enterprise
Microsoft Entra ID Governance pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Microsoft Entra ID Governance | $7.00 | per user per month, paid yearly | Annual subscription, auto-renews; requires an active Entra ID P1 or P2 service plan |
Guests are billed separately by monthly active user through a linked Azure subscription; Six variants (Step Up for P2, Frontline Worker, Government) differ only in prerequisites.
Prices as published by Microsoft Entra ID Governance on the date above. Quotes for larger teams often differ, which is what a request on SaaSBid surfaces.
Integrations, security and hosting
- Integrations
- Hundreds of apps, including Workday, SuccessFactors, SAP, Active Directory
- Data residency
- Tenant location chosen at creation: North America, EMEA, Asia/Pacific, Australia, Japan or Worldwide
Worth knowing before you buy
- Prerequisite: an active Entra ID P1 or P2 (or Microsoft 365 E3/E5) subscription, so the real cost is P1/P2 plus $7.00
- Microsoft says no new IGA features will be added to Entra ID P2; new capabilities go to ID Governance only
- Lifecycle workflows are capped at 50 workflows and 100 custom task extensions per tenant
- Account Discovery and API-driven provisioning at 300K records per day need the Governance license (P1 or P2 alone: 100K per day)
- Governing guests needs a linked Azure subscription; there is no free MAU tier for governance billing and enforcement began January 2026
Microsoft Entra ID Governance alternatives
Vendor dossier
Fit by company size
| Category | 1-10 people | 11-50 people | 51-500 people | 500+ people |
|---|---|---|---|---|
| Identity Governance and Administration (IGA) Software | No data | No data | Strong fit | Strong fit |
Strong fitWorkablePoor fitNo data from the vendor
How buying Microsoft Entra ID Governance works
- How you buy
- Online up to Microsoft Entra ID Governance (with an Entra ID P1 or P2 prerequisite), sales above
- Contract
- Annual subscription that auto-renews
Security and data protection
- Data hosting regions
- North America, EMEA, Asia/Pacific, Australia, Japan, Worldwide
- SCIM provisioning
- Automated user provisioning to SaaS apps from the Free tier; group provisioning from P1
From Microsoft Entra ID Governance's trust center, security and legal pages. Anything not listed is not published.
About the company
- Ownership
- part of Microsoft
Switching to Microsoft Entra ID Governance
Official ways to bring your data over, as documented by Microsoft Entra ID Governance:
- From On-premises identity governance products: documented guide to migrate an organizational role model
Support and integrations
- Integrations
- Hundreds of cloud and on-premises apps
- API
- Microsoft Graph identity governance APIs
- Notable integrations
- Workday, SuccessFactors, SAP
What vendors in this category ask before quoting
Answer these once in a SaaSBid request and Microsoft Entra ID Governance and its alternatives quote against the same facts.
- How many identities, including contractors and service accounts, need to be governed?Most vendors price per identity, and the count sets the tier.
- Which directory and identity provider do you use today?Okta, Entra and Ping add-ons only work on their own platforms.
- Which business applications and on-premises systems must be connected?Connector coverage drives implementation effort and may require extra licenses.
- Which audits or regulations drive this project?SOX or similar rules make separation-of-duties controls a requirement.
- Do you want SaaS, a private cloud or software run in your own data center?Deployment model changes price, timeline and staffing.
- What is your target go-live, and do you have identity engineers in-house?It decides whether a partner or accelerator program is needed.