Try our new research platform with insights from 80,000+ expert users

Azure DDoS Protection vs Microsoft Entra ID comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.2
Azure DDoS Protection offers cost-effective security for public IPs, benefiting users with ROI despite varying enterprise costs.
Sentiment score
7.6
Microsoft Entra ID offers cost-efficiency, enhanced security, and scalability, reducing IT workload and optimizing resources for companies.
We leverage existing licensing, like Windows Server or SQL, and hybrid benefits, and our sales and marketing teams benefit from co-selling and partnership advantages.
We get a return from not needing to pay other vendors to do what we already had from Microsoft, which was better than the competition.
The return on investment comes from not needing as many IT staff to manage and verify user identity and ensuring seamless device connection without needing to administer device compliance manually.
 

Customer Service

Sentiment score
6.3
Educational institutions commend Azure DDoS Protection's swift support, while others experience slower response times affecting satisfaction.
Sentiment score
6.8
Microsoft Entra ID support is mixed; premier praised, non-premium slow, reliant on scripts, but documentation is helpful.
The response time is very slow, especially when multiple teams are required to collaborate on a case.
The actual support when you get to that level is a ten out of ten.
There are immediate answers to any issues that arise with great knowledge and a deep understanding of the product and business needs.
It's not timely or professional.
 

Scalability Issues

Sentiment score
6.9
Azure DDoS Protection excels in scalability and reliability, ideal for large enterprises, enhancing security in extensive environments.
Sentiment score
7.9
Microsoft Entra ID offers scalable, cloud-based user management for businesses, adapting to diverse sizes and configurations globally.
We experienced no scalability issues with Microsoft Entra ID.
Its scalability is impressive, aided by Microsoft's efforts to expand its data centers.
When dealing with tens of thousands of objects, it requires proper management and best practices to retrieve only necessary data.
 

Stability Issues

Sentiment score
7.6
Azure DDoS Protection is highly stable, rated 8/10, with minimal configuration issues and no downtime or false positives reported.
Sentiment score
7.9
Microsoft Entra ID is praised for its reliability, minimal downtime, and quick issue resolution despite occasional minor outages.
It's a critical solution that we can't do without.
The stability of the solution is very high at 99.999%.
We rarely had significant problems or crashes.
 

Room For Improvement

Azure DDoS Protection requires improved interface consistency, reporting, configuration simplicity, bandwidth optimization, enhanced services, and AI-driven auto-remediation.
Microsoft Entra ID needs better integration, improved user management, clearer communication, and enhancements in stability, documentation, and support.
It would be beneficial to have more detailed insights available directly on the dashboard.
I have noticed some false positives with the Web Application Firewall yet not with DDoS Protection.
I suggest adding more services and additional services, which would be beneficial.
A recent incident we dealt with took four months to resolve with a seven-day deadline, which was quite frustrating.
There is a need for better transformation support from on-premises Active Directory policies to the cloud, as Entra ID doesn't cover this sufficiently yet.
The frequent changes in branding cause confusion among customers who struggle to keep track of product names and functions.
 

Setup Cost

Azure DDoS Protection offers expensive but comprehensive protection with trial, special pricing for education, and no extra fees for some uses.
Microsoft Entra ID provides flexible, scalable pricing with various tiers and offers discounts for nonprofits, despite complex cost structures.
If used with Front Door or Web Application Firewall, DDoS Protection is included without additional cost.
The pricing is somewhat costly, usually around $3,000 to $4,000 per month.
Compared to competitors, it is good.
We are getting our money's worth.
Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there are no additional costs associated with pricing and licensing.
Compared to other Microsoft products, the cost is not too expensive.
 

Valuable Features

Azure DDoS Protection offers seamless integration, robust security, and scalability, despite higher costs, providing significant ROI for vulnerable environments.
Microsoft Entra ID provides advanced security features, seamless integration, and centralized management for enhanced identity protection and access governance.
The security architecture with Azure DDoS Protection is critical for safeguarding our financial organization's infrastructure.
The ability to do research and development quickly without waiting for infrastructure is a plus.
The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective.
We can secure the applications that we are building and make sure that if the application were to be compromised, there is no full access to a customer's environment causing issues and other security concerns.
It's integrated with Microsoft technologies like Authenticator, SSO, and MFA, streamlining operations and creating a seamless environment.
The granular control, such as preventing logins from specific locations, enhances security significantly.
 

Categories and Ranking

Azure DDoS Protection
Ranking in Microsoft Security Suite
21st
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
8
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (8th)
Microsoft Entra ID
Ranking in Microsoft Security Suite
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
219
Ranking in other categories
Single Sign-On (SSO) (1st), Authentication Systems (1st), Identity Management (IM) (1st), Identity and Access Management as a Service (IDaaS) (IAMaaS) (1st), Access Management (1st)
 

Mindshare comparison

As of April 2025, in the Microsoft Security Suite category, the mindshare of Azure DDoS Protection is 2.2%, up from 2.0% compared to the previous year. The mindshare of Microsoft Entra ID is 9.5%, up from 6.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Venkat Raju Mallipudi - PeerSpot reviewer
Acts as an additional layer of protection, provides endpoint security but not very easy to configure
It's not very easy to configure, in my view. We have to do some work behind the scenes. It's not very simple. We have to do it very carefully, and we need to monitor this enablement as well. But apart from that, I didn't see any kind of challenges. So, in my opinion, configuration is the main trouble for them. It is something that can be done to be better. Not just configuration. You need an expert who knows the ins and outs of these security solutions. In my experience, people struggle with configuration. While configuring, we get this error, we get that error, and then we try to fix those issues. I have seen those. It's not straightforward.
Aaron Liang - PeerSpot reviewer
Has significantly improved secure access to applications and resources in our environment
Microsoft Entra ID has helped by simplifying our management of permissions for APIs. We are not directly exposing credentials, as we use tokens instead. It has made management easier and more secure, especially in a multi-user environment. The implementation of Microsoft Entra ID significantly improved secure access to applications and resources in our environment, primarily through the widespread use of single-sign-on. Managing API permissions became much easier, as application registration often involves calling an API to utilize services without directly exposing credentials, relying instead on token-based authentication. This streamlined approach benefits end-users by simplifying access while remaining transparent to them. Ultimately, my role focuses on ensuring a smooth and user-friendly experience, even if the underlying technology remains unseen by the end-users. Our company strongly emphasizes passwordless authentication, primarily through device-bound passkeys in Microsoft Authenticator. While administrators with high-privileged accounts utilize YubiKeys and passwords for tasks like accessing Microsoft Graph, we are actively transitioning all other users towards passwordless methods such as Windows Hello biometrics. This approach streamlines authentication and enhances security. Though initial deployment in 2022 presented challenges due to hardware limitations and the lingering effects of the COVID-19 pandemic, the technology has significantly improved and provides a simple and effective user experience.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
845,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Financial Services Firm
13%
Government
8%
Manufacturing Company
7%
Educational Organization
33%
Computer Software Company
10%
Financial Services Firm
8%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Azure DDoS Protection?
Azure DDoS Protection offers superior protection against denial-of-service attacks.
What is your experience regarding pricing and costs for Azure DDoS Protection?
The pricing is somewhat costly, usually around $3,000 to $4,000 per month. Managing this expense is tough, especially since we haven't received everything we need for our capital expenditure manage...
What needs improvement with Azure DDoS Protection?
The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces. It would be beneficial to have more detailed insights available directly on th...
How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What do you like most about Azure Active Directory?
It is very simple. The Active Directory functions are very easy for us. Its integration with anything is very easy. We can easily do third-party multifactor authentication.
What is your experience regarding pricing and costs for Azure Active Directory?
Microsoft Entra ID is reportedly quite expensive for each user regarding security features. The renewal cost is particularly high according to the teams managing purchases.
 

Also Known As

No data available
Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.
Find out what your peers are saying about Azure DDoS Protection vs. Microsoft Entra ID and other solutions. Updated: March 2025.
845,406 professionals have used our research since 2012.