Microsoft Entra Workload ID
Help secure identities for apps and services and their access to cloud resources.
5 ways to secure identity and access in the age of AI
Help your organization be better prepared for the opportunities and challenges ahead by adopting a comprehensive defense-in-depth strategy that spans identity, endpoint, and network.
Help manage and secure access by apps and services to cloud resources
Apply adaptive access policies
Assign conditional access policies to your apps or services based on location and risk level, all in one place.
Detect compromised identities
Help reduce risk exposure by intelligently detecting and responding to compromised workload identities.
Simplify lifecycle management
Manage lifecycles more easily with insight into access activities and status of workload identities.
Introducing Microsoft Entra Workload ID
What are workload identities?
Workload identities are identities granted to apps or services that need to access and communicate with other services.
Human identities include employees, partners, and customers. Non-human identities include identities for apps and services, referred to as “workload identities” in the industry. In Microsoft Entra, workload identities include applications and service principals.
Help protect apps and services with Microsoft Entra Workload ID
Enhance security with conditional access
Create security policies for each workload identity using conditional access.
Contain threats and reduce risk
Intelligently detect and respond to compromised workload identities using cloud-based AI.
Review usage and implement least privilege
Regularly review access of workload identities assigned to their privileged roles.
Get more insight into workload identities
See unused workload identities and receive actionable recommendations to address security issues.
Microsoft Entra Workload ID
Originally starting from $3.00 now starting from $3.00
$3.00 $3.00
workload identity/month, paid yearly
(annual commitment)
Use Microsoft Entra Workload ID to:
Control workload identity access with adaptive policies.
Reduce the risk exposure from lost or stolen identities or credentials.
Get a comprehensive health-check view of workload identities.
Explore Microsoft Entra
Secure access for any identity to any AI or resource, from anywhere.
Strengthen identity fundamentals for the AI era
Microsoft Entra ID
Protect identities and manage access to apps, devices, and data.
Microsoft Entra Domain Services
Manage your domain controllers in the cloud.
Security Copilot in Microsoft Entra
Get generative AI-powered assistance.
Secure access for your workforce with Microsoft Entra Suite
Microsoft Entra Private Access
Help users securely connect to private apps from anywhere.
Microsoft Entra Internet Access
Secure access to internet and software as a service (SaaS) apps.
Microsoft Entra ID Governance
Help protect, monitor, and audit access to critical assets.
Microsoft Entra ID Protection
Block identity compromise in real time.
Microsoft Entra Verified ID
Build user-owned identity scenarios.
Secure access for your customers and partners
Microsoft Entra External ID
Provide external identities with secure access to any app.
Secure access for agents
Microsoft Entra Agent IDPREVIEW
Manage, govern, and protect AI agents.
Additional resources
Microsoft Entra Workload ID overview video
Learn how to help secure workload identities with Microsoft Entra Workload ID.
An introduction to Microsoft Entra Workload ID
Quickly get up to speed on what workload identities are and how Microsoft Entra Workload ID helps address business challenges.
Securing Non-Human Identities
Learn from KuppingerCole how to better protect non-human identities.
Protect everything
Make your future more secure. Explore your security options today.
Frequently asked questions
You will need an Azure or Microsoft 365 subscription. Use an existing subscription or set up a new one, then sign in to the Microsoft 365 portal or Microsoft Entra admin center with your credentials to buy Microsoft Entra Workload ID licenses.
Yes, conditional access for workload identities is a premium feature that requires a license.Learn more.
Yes, customers can use a combination of licenses under one tenant.