Microsoft Active Directory vs Microsoft Entra ID comparison

Microsoft Active Directory and Microsoft Entra ID are both solutions in the Single Sign-On (SSO) category. Microsoft Active Directory is ranked #8 with an average rating of 8.6, while Microsoft Entra ID is ranked #1 with an average rating of 8.7. Microsoft Active Directory holds a 2.3% mindshare in SSO, compared to Microsoft Entra ID’s 29.7% mindshare. Additionally, 97% of Microsoft Active Directory users are willing to recommend the solution, compared to 94% of Microsoft Entra ID users who would recommend it.

Microsoft Active Directory

Read 39 Microsoft Active Directory reviews

936 Views
664 Comparison Views

97% willing to recommend

Microsoft Entra ID

Read 218 Microsoft Entra ID reviews

12,415 Views
9,201 Comparison Views

94% willing to recommend

Microsoft Active Directory

Microsoft Entra ID

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Microsoft Entra ID and Microsoft Active Directory compete in the identity management category. Microsoft Entra ID has the upper hand in cloud integration, while Microsoft Active Directory excels in on-premise security.

Features: Microsoft Entra ID integrates seamlessly with cloud services, offers multi-factor authentication, and provides strong cloud-native capabilities. Microsoft Active Directory is known for comprehensive device management, advanced group policies, and robust on-premise security features.

Room for Improvement: Microsoft Entra ID needs better hybrid deployment capabilities, more detailed auditing tools, and stronger on-premise integrations. Microsoft Active Directory requires enhanced cloud integration, improved user activity logging, and more cloud-compatible features.

Ease of Deployment and Customer Service: Microsoft Entra ID is straightforward to deploy in cloud environments, with extensive documentation and prompt customer service. Microsoft Active Directory is more complex to deploy, especially in hybrid environments, but still offers solid customer support.

Pricing and ROI: Microsoft Entra ID offers competitive pricing with a quicker return on investment due to lower setup costs and faster deployment. Microsoft Active Directory involves higher initial setup costs but delivers long-term benefits with its extensive feature set.

To learn more, read our detailed Microsoft Active Directory vs. Microsoft Entra ID Report (Updated: December 2024).

Buyer's Guide

Microsoft Active Directory vs. Microsoft Entra ID

December 2024

Download the complete report

Helped 824,095 peers since 2012

Categories and Ranking

Microsoft Active Directory

Ranking in Single Sign-On (SSO)

8th

Average Rating

8.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Active Directory Management (6th)

Microsoft Entra ID

Ranking in Single Sign-On (SSO)

1st

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

218

Ranking in other categories

Authentication Systems (1st), Identity Management (IM) (1st), Identity and Access Management as a Service (IDaaS) (IAMaaS) (1st), Access Management (1st), Microsoft Security Suite (4th)

Mindshare comparison

As of December 2024, in the Single Sign-On (SSO) category, the mindshare of Microsoft Active Directory is 2.3%, up from 1.2% compared to the previous year. The mindshare of Microsoft Entra ID is 29.7%, up from 28.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Single Sign-On (SSO)

Featured Reviews

Rajitha Abhisheka

Senior Systems Engineer at Virtual IT Group - Australia

A solution that easily merges with cloud-based ADs and provides superior data security

The interface for logs should be user-friendly and allow for enhanced filtering to drill down to incidents. It is time consuming to get a clear picture and review deviations in conditional policies because you have to check each and every log to find information on malicious attacks, a compromised end-user's account, or phishing emails. The logs for sign-ins and auditing should be available for more than a 30-90 day window. Most logs are displayed in UTC but it would be helpful to include time conversions for tenant regions. Currently, we must do time conversions manually before we contact users to share information and troubleshoot issues.

Read full review

Vinod Survase

M365 Senior Consultant at Capgemini

Saves us time and money and features Conditional Access policies, SSPR, and MFA

I want better integration between Azure AD and the on-prem environment because there are currently limitations that can hamper employee experience. We use a feature called password writeback, that can be challenging to implement in a hybrid environment. Employees can change their passwords using a self-service password reset (SSPR) feature, which reflects from the cloud to the on-prem identity, but not the other way around. Currently, there is no way to reflect passwords from on-prem identities to the cloud. There are other similar limitations, such as a cap on the number of identities that can be synchronized in a particular time frame, which can be an issue for large enterprises with 300,000 employees or more.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Microsoft Active Directory is the group policies."

"Active Directory makes managing user policies easier, like when a user wants to share files. We also use it to create and manage our email accounts."

"It is an all-in-one solution for cybersecurity and is available at a very low price."

"It's quite easy to integrate into other directories."

"The most valuable feature of Microsoft Active Directory is the ability to search for computers and users. While I do not have administrative privileges to reset passwords, I can view user information such as department, and communicate with someone who can make the changes."

"The ability for a single sign-on for applications."

"The user-friendliness of Microsoft Active Directory is a valuable feature."

"It is easy to understand all the components."

More Microsoft Active Directory pros

"Scalability has been the biggest benefit."

"The best thing about Microsoft Entra ID is the ease of setup."

"The solution has a variety of tools. Two of the most valuable features are the ability to create users and to replicate the user account from on-premise to the cloud."

"It is very simple. The Active Directory functions are very easy for us. Its integration with anything is very easy. We can easily do third-party multifactor authentication."

"The product is easy to use."

"Microsoft Entra ID provides granular role assignments for Azure permissions or Azure AD roles. Using a privileged identity manager allows us to give specific access to certain groups of employees for a limited time. Entra's ability to integrate Azure Virtual Machines and security benefits has been exceptional, especially for managing infrastructure and applications."

"We have not had any formal issues with scalability."

"The boards for task tracking are a valuable feature."

More Microsoft Entra ID pros

Cons

"It could be more scalable. We still need another software solution to monitor the network in addition to Active Directory and OpManager, our domain controller. We use SolarWinds."

"The challenges everyone now has in mind is how to really migrate fully to the cloud. Many companies face both technical and cost-related challenges when moving from on-premise Active Directory to Microsoft Intra."

"There could be enough material to learn about the product."

"The solution's price could be better."

"There are no reporting features."

"Active Directory's user experience is a little dated. Group policy management should be more customizable."

"The interface for logs should be user-friendly and allow for enhanced filtering to drill down to incidents."

"The solution needs to be simplified to navigate."

More Microsoft Active Directory cons

"Microsoft needs to make improvements in this regard and extend its services to other operating systems as well, especially when considering their widespread usage."

"From an admin perspective, I would like to see improvement in the Microsoft Graph API."

"I would like it to be easier to integrate third-party applications."

"Azure Active Directory could be made easier to use. We have large amounts of data and storage. We are looking for video files and media content for applications, we will think about options, such as cloud storage or a CDN."

"The integration between the Azure active directory and the traditional active directory could be improved upon."

"The product could be more cost-effective."

"The thing that is a bit annoying is the inability to nest groups. Because we run an Azure hybrid model, we have nested groups on-premise which does not translate well. So, we have written some scripts to kind of work around that. This is a feature request that we have put in previously to be able to use a group that is nested in Active Directory on-premise and have it handled the same way in Azure."

"There are some features, where if you want to access them, then you need to make use of PowerShell. If someone is not really versed in PowerShell scripting, then they would definitely have issues using some of those features in Azure Active Directory."

More Microsoft Entra ID cons

Pricing and Cost Advice

"Active Directory is built-in into Microsoft Windows 10. I'm not an administrator and would not be involved in purchasing decisions for new versions of the software. I have only used the client portion of it, I do not know if there is a cost to using the solution."

"I rate the product’s pricing a five out of ten."

"I'm unsure about the cost of the solution, as I was never involved in that aspect. However, I don't think it would be expensive. It might be average, around four or five out of ten."

"My company makes payments every quarter towards the licensing costs of the product."

"We purchase the license for the solution on a yearly basis."

"The product's premium support services are expensive."

"The price of Microsoft Active Directory could improve. We pay annually for the solution."

"Active Directory is an expensive solution, primarily due to Microsoft's licensing model. This licensing approach includes paying for server licenses as well as for each computer that connects to it. However, when working with the Azure cloud, there is no cost for the server. This is profitable and one of the main reasons why Azure Cloud and other cloud-based solutions are being used more."

More Microsoft Active Directory pricing and cost advice

"If you have a different IDP today, I would take a close look at what your licensing looks like, then reevaluate the licensing that you have with Microsoft 365, and see if you're covered for some of this other stuff. Folks sometimes don't realize that, "Oh, I'm licensed for that service in Azure." This becomes one of those situations where you have the "aha" moment, "Oh, I didn't know we can do that. Alright, let's go down this road." Then, they start to have conversations with Microsoft to see what they can gain. I would recommend that they work closely with their TAM, just to make sure that they are getting the right level of service. They may just not be aware of what is available to them."

"I'd recommend Azure Active Directory if you are a big company. For small or medium companies, it's probably not the best idea in the world because of the pricing. If you are a small company, you can probably deploy your own solutions because you're not handling a website with tons of traffic. If you are not like Adidas, Nike, or Walmart, you can do it in a way that is more localized than handling everything through a big price solution. However, Azure tends to provide you with solutions that are easier to use. If it was cheaper, I'd definitely recommend going for it."

"Compared to other Microsoft products, the cost is not too expensive. There's a free tier available, though it doesn't include all features. Overall, it's well-priced."

"There are add-on components and services, such as identity services, that we have to add to our Azure subscription. Only then can I actually say it's on par with the on-prem server edition. Why should I pay for a component? It should be included in my subscription."

"The price is good, and we have no complaints."

"I would advise implementing the solution to VIPs and admins; it's affordable, effective, and efficient. I would say training staff on properly using the tool is also essential."

"Azure AD has four licensing options- Free, Office 365 apps, Premium P1, and Premium P2. The free option has a limited number of identities and features, and the Office 365 version comes included in several Office 365 subscriptions. With the P1 and P2 licenses, we get all the freeware features plus additional security features, but these come at a higher price. The base price for P1 and P2 is $6 and $9 per user per month, respectively."

"The solution can be cheaper."

More Microsoft Entra ID pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Single Sign-On (SSO) solutions are best for your needs.

See recommendations

824,095 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

12%

Government

Manufacturing Company

Educational Organization

32%

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Microsoft Active Directory?

The solution is easy to install and has good reliability.

See all answers

What needs improvement with Microsoft Active Directory?

The challenges everyone now has in mind is how to really migrate fully to the cloud. Many companies face both technical and cost-related challenges when moving from on-premise Active Directory to M...

See all answers

What is your primary use case for Microsoft Active Directory?

We are still on a hybrid environment where we have Azure Directory on-premises, and sync it up to Microsoft.

See all answers

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...

See all answers

What do you like most about Azure Active Directory?

It is very simple. The Active Directory functions are very easy for us. Its integration with anything is very easy. We can easily do third-party multifactor authentication.

See all answers

What is your experience regarding pricing and costs for Azure Active Directory?

Most features of Entra ID are part of Microsoft's ecosystem and included in Microsoft 365 bundles, which means there are no additional costs associated with pricing and licensing.

See all answers

Comparisons

ManageEngine ADManager Plus vs Microsoft Active Directory

Compared 29% of the time

Ping Identity Platform vs Microsoft Active Directory

Compared 25% of the time

Fortinet FortiAuthenticator vs Microsoft Active Directory

Compared 15% of the time

CyberArk Identity vs Microsoft Active Directory

Compared 7% of the time

JumpCloud vs Microsoft Active Directory

Compared 5% of the time

More Microsoft Active Directory Competitors

Microsoft Intune vs Microsoft Entra ID

Compared 11% of the time

Google Cloud Identity vs Microsoft Entra ID

Compared 10% of the time

Okta Workforce Identity vs Microsoft Entra ID

Compared 8% of the time

Auth0 vs Microsoft Entra ID

Compared 5% of the time

CyberArk Privileged Access Manager vs Microsoft Entra ID

Compared 5% of the time

More Microsoft Entra ID Competitors

Product Reports

Buyer's Guide

Microsoft Active Directory

December 2024

Download Microsoft Active Directory product report

Buyer's Guide

Microsoft Entra ID

December 2024

Download Microsoft Entra ID product report

Also Known As

No data available

Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator

Learn More

Video not available

Microsoft

Interactive Demo

Demo not available

Microsoft

Overview

Active Directory stores information about objects on the network and makes this information easy for administrators and users to find and use. Active Directory uses a structured data store as the basis for a logical, hierarchical organization of directory information.

This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts.

Security is integrated with Active Directory through logon authentication and access control to objects in the directory. With a single network logon, administrators can manage directory data and organization throughout their network, and authorized network users can access resources anywhere on the network. Policy-based administration eases the management of even the most complex network.

Microsoft Entra ID is used for extending on-premises Active Directory to the cloud, managing application access, enabling multi-factor authentication, and single sign-on. It facilitates policy enforcement and secure access, ensuring centralized identity management across cloud and on-premises resources.

Organizations utilize Microsoft Entra ID for robust user and group management, identity synchronization, and conditional access. Its seamless integration with third-party apps, scalability, and support for remote work make it a preferred choice. The admin center streamlines identity and access tasks, enhancing efficiency and security with features like privileged identity management and audit logs.

What are the key features of Microsoft Entra ID?

Single Sign-On: Simplifies user access to multiple applications with one login.
Multifactor Authentication: Enhances security by requiring additional verification.
Conditional Access: Establishes policies that determine how users' access cloud apps.
Integration: Easily integrates with various third-party applications.
User Identity Protection: Safeguards user identities from threats.
Privileged Identity Management: Manages elevated access to sensitive resources.
Audit Logs: Provides thorough activity logs for oversight and compliance.

What benefits should users look for in Microsoft Entra ID reviews?

Enhanced Security: Offers strong multifactor authentication and identity protection.
Administrative Efficiency: Simplifies identity and access management tasks.
Scalability: Supports growing user bases and remote work environments.
Integration Capabilities: Compatible with numerous third-party applications.
User-Friendly Interface: Makes managing user identities straightforward.

Microsoft Entra ID implementation varies across industries. Tech firms leverage it for secure, scalable access management, while healthcare organizations utilize its identity protection features to safeguard patient data. Educational institutions adopt Entra ID for streamlined user management and policy enforcement, ensuring secure access for students and staff across on-premises and cloud resources.

Sample Customers

Information Not Available

Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.

Buyer's Guide

Microsoft Active Directory vs. Microsoft Entra ID

December 2024

Free Report: Microsoft Active Directory vs. Microsoft Entra ID

Find out what your peers are saying about Microsoft Active Directory vs. Microsoft Entra ID and other solutions. Updated: December 2024.

DOWNLOAD NOW

824,095 professionals have used our research since 2012.

See our Microsoft Active Directory vs. Microsoft Entra ID report.

See our list of best Single Sign-On (SSO) vendors.

We monitor all Single Sign-On (SSO) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.