Supports common features from free and basic Azure AD, such as:

• Group-based access management/provisioning
• Self-service password resets for cloud users
• Company branding (logon pages/access panel customization)
• Application proxy
• Service level agreement of 99.9%

Premium features also include:

• Self-service group and app management/self-service application additions/dynamic groups
• Self-service password reset/change/unlock with on-premises write-back
• MFA (cloud and on-premises MFA server)
• Microsoft Identity Manager (MIM) CAL plus MIM server
• Cloud app discovery
• Connect health
• Automatic password rollover for group accounts

Since Q3/2016, Microsoft has also allowed customers to use the Azure AD P2 plan, which includes all the capabilities in Azure AD premium P1 as well as new identity protection and privileged identity management capabilities. This was an important step for Microsoft to extend its offering for Windows 10 and Windows Server 2016/19 device management with Azure AD.

Currently, Azure AD enables Windows 10 customers to join a device to Azure AD, implement SSO for desktops, use a Microsoft passport for Azure AD, and have a central administrator BitLocker recovery.

Depending on what you plan to do with your Azure environment, you should choose the right Azure AD option.