Try our new research platform with insights from 80,000+ expert users

Microsoft Entra ID Protection vs Microsoft Sentinel comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

No sentiment score available
Sentiment score
7.2
Users find Microsoft Sentinel offers positive ROI through improved visibility, automation, and efficiency, despite initial costs and quantification challenges.
 

Customer Service

Sentiment score
6.4
Microsoft Entra ID Protection support is generally helpful, with mixed experiences depending on subscription and partner involvement.
Sentiment score
6.9
Microsoft Sentinel support is mixed; premium plans and better Microsoft relationships yield favorable experiences despite some challenges.
They often refer to internal blogs, which doesn't offer much new information and can limit our capabilities in troubleshooting.
Their solutions' integration simplifies resolving issues compared to those caused by third-party products.
Working with a Sentinel engineer helped us tune settings effectively.
 

Scalability Issues

Sentiment score
8.4
Microsoft Entra ID Protection is highly scalable and adaptable, efficiently handling diverse organizational needs from small businesses to enterprises.
Sentiment score
8.1
Microsoft Sentinel's cloud architecture ensures scalable, flexible data handling with minimal management, supporting large user bases and easy integration.
Office 365 and Exchange are running on it, covering about 35,000 users efficiently.
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
 

Stability Issues

Sentiment score
7.8
Microsoft Entra ID Protection is rated highly for stability despite occasional bugs and rare Azure-related outages.
Sentiment score
7.9
Microsoft Sentinel is highly stable and reliable, with users praising its performance and noting rare, minor configuration issues.
So far, we have not experienced any issues, and it has been stable from the beginning.
Sentinel's stability is great.
 

Room For Improvement

Microsoft Entra ID Protection needs improvements in integration, compatibility, user interface, and pricing to enhance user experience and scalability.
Microsoft Sentinel users seek improved third-party integration, user-friendly features, enhanced threat intelligence, and streamlined data management to reduce costs.
Microsoft has not offered control over how they calculate high or low-risk scenarios.
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Currently, we are happy to have a way in the middle with not so much cost, but it would be nice to have the ability to enhance the automation of workflows based on learned incidents.
 

Setup Cost

Microsoft Entra ID Protection pricing is considered competitive but slightly complex, with potential improvements needed in the pricing structure.
Microsoft Sentinel offers cost-effective, consumption-based pricing, benefiting from Azure integration with careful data management to control expenses.
Microsoft Entra ID requires additional licensing components.
We already had the necessary licensing for Sentinel, so we didn't need to spend extra money.
 

Valuable Features

Microsoft Entra ID Protection enhances security and efficiency with seamless integration, single sign-on, and comprehensive identity management features.
Microsoft Sentinel offers seamless integration, AI-driven threat detection, and automation, providing comprehensive security and ease of setup for organizations.
Having a single sign-on feature with Entra ID ensures seamless access to various applications, even those with significant security constraints.
Custom workbooks are valuable. It is one of the crucial points in dealing with potential security threats in an automated way without requiring too much manpower.
 

Categories and Ranking

Microsoft Entra ID Protection
Ranking in Microsoft Security Suite
9th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
13
Ranking in other categories
Identity Management (IM) (9th), Identity Threat Detection and Response (ITDR) (2nd)
Microsoft Sentinel
Ranking in Microsoft Security Suite
5th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
89
Ranking in other categories
Security Information and Event Management (SIEM) (3rd), Security Orchestration Automation and Response (SOAR) (1st), AI-Powered Cybersecurity Platforms (6th)
 

Mindshare comparison

As of January 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Entra ID Protection is 4.9%, up from 3.4% compared to the previous year. The mindshare of Microsoft Sentinel is 5.4%, down from 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Mahender Nirwan - PeerSpot reviewer
Access to other software is just one click away and suitable for big organizations
Currently, we have limited use of Microsoft AD. We only use it to see if user blocks are available. If they are, we unblock the account and get access accordingly. AD has paid access control features. We can add access control over AD. For example, for documentation, we use an Outline tool. It's open source, and we add our company's knowledge base to it. It's an alternative to Confluence. We don't want everyone to have access to all documentation. If I create documentation for my team, only my team should have access, not support or sales. We can add these scopes or access controls over AD. Once integrated, the person will get the appropriate access control features upon logging in. Role-based access control is a great feature of Active Directory.
Nitin Arora - PeerSpot reviewer
Gives us one place to investigate and respond to threats, and automation eliminates manual work
They can work on the EDR side of things. It is already really superb, because of the kinds of features we get with the EDR solution. It's not a standard EDR and they have recently enhanced things. But the problem is with onboarding devices. I have different OS flavors, including a large number of Linux, Windows, macOS, and some on-prem machines as well. Every time we need to onboard these kinds of machines into the EDR, we need to do it with the help of Intune, to sync up the devices, and do the configuration. I'm looking for something on the EDR side that will reduce this kind of work. They can eliminate having to do manual configuration for the machines, and check the different types of configurations for each OS. In some cases, it does not support some OSs. If they could reduce this type of work, that would be really amazing.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
825,399 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
14%
Government
9%
Manufacturing Company
8%
Computer Software Company
16%
Financial Services Firm
10%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Active Directory Identity Protection?
Microsoft Entra ID requires additional licensing components, particularly for Entra ID governance as an add-on for those with P1 or P2 licenses.
What needs improvement with Azure Active Directory Identity Protection?
Microsoft has not offered control over how they calculate high or low-risk scenarios. While they mention if a low risk is found by Microsoft, the triggered policy isn't customizable. Enhanced confi...
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and its Threat Hunting functionality with AI available as templates or customized ...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
 

Also Known As

Azure Active Directory Identity Protection, Azure AD Identity Protection
Azure Sentinel
 

Learn More

Video not available
 

Overview

 

Sample Customers

Information Not Available
Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Find out what your peers are saying about Microsoft Entra ID Protection vs. Microsoft Sentinel and other solutions. Updated: October 2024.
825,399 professionals have used our research since 2012.