| title | include file |
|---|---|
| description | include file |
| author | barclayn |
| ms.service | entra-id |
| ms.topic | include |
| ms.date | 01/31/2025 |
| ms.author | barclayn |
| ms.custom | include file,licensing, sfi-ga-nochange |
The following table lists features that are available for authentication in the various versions of Microsoft Entra ID. Plan out your needs for securing user sign-in, then determine which approach meets those requirements. For example, although Microsoft Entra ID Free provides security defaults with multifactor authentication, only Microsoft Authenticator can be used for the authentication prompt, including text and voice calls. This approach might be a limitation if you can't make sure that Authenticator is installed on a user's personal device.
| Feature | Microsoft Entra ID Free - Security defaults (enabled for all users) | Microsoft Entra ID Free - Global Administrators only | Office 365 | Microsoft Entra ID P1 | Microsoft Entra ID P2 |
|---|---|---|---|---|---|
| Protect Microsoft Entra tenant admin accounts with MFA | ✅ | ✅ (Microsoft Entra Global Administrator accounts only) | ✅ | ✅ | ✅ |
| Mobile app as a second factor | ✅ | ✅ | ✅ | ✅ | ✅ |
| Phone call as a second factor | ✅ | ✅ | ✅ | ||
| SMS as a second factor | ✅ | ✅ | ✅ | ✅ | |
| Admin control over verification methods | ✅ | ✅ | ✅ | ✅ | |
| Fraud alert | ✅ | ✅ | |||
| MFA Reports | ✅ | ✅ | |||
| Custom greetings for phone calls | ✅ | ✅ | |||
| Custom caller ID for phone calls | ✅ | ✅ | |||
| Trusted IPs | ✅ | ✅ | |||
| Remember MFA for trusted devices | ✅ | ✅ | ✅ | ✅ | |
| MFA for on-premises applications | ✅ | ✅ | |||
| Conditional Access | ✅ | ✅ | |||
| Risk-based Conditional Access | ✅ | ||||
| Self-service password reset (SSPR) | ✅ | ✅ | ✅ | ✅ | ✅ |
| SSPR with writeback | ✅ | ✅ |