First page of Microsoft's 100,000-partner directory, sorted by responsiveness All 6 Microsoft Solutions Partner designations Microsoft Solutions Partner since 2006 1,100+ organizations under management
Home/Subscriptions/Microsoft Entra ID P1 (Non-Profit Pricing)
StandaloneNonprofit

Microsoft Entra ID P1 (Non-Profit Pricing) — Pricing, Plans & What's Included

Identity and access management for eligible nonprofit/Charity customers that need stronger sign-in security, Conditional Access, and easier app access without moving to Entra ID P2.

Microsoft Entra ID P1 is the paid identity plan many nonprofits consider when they need Conditional Access and other P1 identity controls for assigned users. It can also support broader app access and hybrid identity scenarios, but confirm whether your existing Microsoft 365 licensing already covers the specific sign-in, app access, or SSO needs before adding standalone seats.

Eligible nonprofit tenantsConditional AccessSingle sign-on planningHybrid identity planningSelf-service password reset planningPer-user licensing

What's included — and what isn't

Included

Microsoft Entra ID P1 user rights for assigned users.
Conditional Access policies to help control access based on supported signals such as user, group, device, app, and location.
Single sign-on access planning for cloud and SaaS applications integrated with Microsoft Entra ID, where the required SSO capability is included in or enabled by your licensing.
Self-service password reset capabilities for assigned users, subject to the current Microsoft service description.
Group-based access management features, including dynamic group capabilities, subject to the current Microsoft service description.
Hybrid identity support for organizations connecting on-premises Active Directory with Microsoft Entra ID, subject to the current Microsoft service description.

Not included

Microsoft Entra ID P2 capabilities such as Privileged Identity Management and Identity Protection risk-based investigation/remediation.
Risk-based Conditional Access or Identity Protection scenarios that require Microsoft Entra ID P2 where applicable.
Microsoft 365 desktop apps, Exchange mailboxes, Teams, SharePoint storage, or OneDrive storage unless licensed separately.
Endpoint management with Microsoft Intune unless licensed separately.
Microsoft Defender security products unless licensed separately.
A donated nonprofit grant entitlement; this listing is for the paid nonprofit-priced SKU shown in the configurator.
Choose Entra ID P2 instead if your nonprofit needs PIM or Identity Protection risk-based scenarios.
Choose a Microsoft 365 suite instead if the real requirement is apps, mailbox, storage, endpoint management, or a broader security bundle rather than standalone identity licensing.

Eligibility & fine print

Catalog constraints & variants
  • Nonprofit pricing is for eligible Charity tenants and may require Microsoft nonprofit validation.
  • Licenses are assigned per user; buy for the people who need Microsoft Entra ID P1 capabilities.
  • This is a standalone identity plan and does not by itself include the full Microsoft 365 app, mailbox, endpoint, or security suite.
  • Do not buy duplicate Entra ID P1 seats for users who are already covered by another qualifying Microsoft plan.
Commitment & payment summary

Available for Charity customers as monthly commitment with monthly billing, annual commitment paid upfront, or annual commitment paid monthly. Annual upfront is the lowest listed per-seat option in the configurator; annual paid monthly runs higher; monthly commitment gives the most flexibility.

Frequently asked questions

What is Microsoft Entra ID P1 (Non-Profit Pricing) for Charity customers?

Microsoft Entra ID P1 (Non-Profit Pricing) is a standalone per-user identity and access management plan for eligible nonprofit tenants, because it adds paid Entra ID P1 capabilities such as Conditional Access and broader app access controls without requiring Entra ID P2. It is best for charities that need stronger sign-in governance, single sign-on planning, hybrid identity support, or self-service password reset planning for specific users.

What is included with Microsoft Entra ID P1 for nonprofits?

Microsoft Entra ID P1 for nonprofits includes Entra ID P1 user rights for assigned users, because the license is purchased and assigned per user. Typical P1 capabilities include Conditional Access, single sign-on planning for integrated cloud and SaaS apps, self-service password reset capabilities, group-based access management including dynamic groups, and hybrid identity support, subject to the current Microsoft service description.

What is not included in Microsoft Entra ID P1 (Non-Profit Pricing)?

Microsoft Entra ID P1 does not include Microsoft Entra ID P2, because P2 is the higher identity plan for features such as Privileged Identity Management and Identity Protection risk-based scenarios. It also does not include Microsoft 365 desktop apps, Exchange mailboxes, Teams, SharePoint, OneDrive storage, Microsoft Intune, or Microsoft Defender products unless those are licensed separately.

Does every user in a nonprofit tenant need an Entra ID P1 license?

No, every user does not automatically need Microsoft Entra ID P1, because the license is assigned per user to people who need P1 capabilities. A charity should buy seats for users covered by P1 Conditional Access, SSO, self-service password reset, group, or hybrid identity requirements, and should avoid duplicate seats for users already covered by another qualifying Microsoft plan.

Do we need standalone Entra ID P1 if we already have Microsoft 365 licenses?

Maybe not, because some Microsoft 365 suites already include Entra ID P1 or include enough identity features for your requirement. Before buying standalone Microsoft Entra ID P1 (Non-Profit Pricing), a nonprofit should confirm whether its current Microsoft 365 licenses already cover the needed Conditional Access, SSO, self-service password reset, group, or hybrid identity capabilities.

Should a charity choose Entra ID P1 or Entra ID P2?

A charity should choose Microsoft Entra ID P1 when the requirement is mainly Conditional Access and standard P1 identity management, because P1 is the lower standalone paid identity plan. Choose Microsoft Entra ID P2 instead if the nonprofit needs Privileged Identity Management, Identity Protection, user-risk or sign-in-risk scenarios, or risk-based Conditional Access that requires P2.

Can Microsoft Entra ID P1 require multifactor authentication with Conditional Access?

Yes, Microsoft Entra ID P1 can be used to require multifactor authentication through Conditional Access policies, because P1 includes Conditional Access for assigned users. If the policy depends on risk signals such as user risk or sign-in risk, confirm whether Microsoft Entra ID P2 is required before quoting P1.

Does Microsoft Entra ID P1 support self-service password reset and hybrid identity?

Yes, Microsoft Entra ID P1 can support self-service password reset capabilities and hybrid identity scenarios, because P1 is commonly used by organizations connecting on-premises Active Directory with Microsoft Entra ID. Specific password reset, writeback, and hybrid configuration details should be validated against the current Microsoft service description before purchase.

Does Microsoft Entra ID P1 include Teams, Exchange email, Office apps, SharePoint, or OneDrive?

No, Microsoft Entra ID P1 does not include Teams, Exchange mailboxes, Microsoft 365 desktop apps, SharePoint storage, or OneDrive storage, because it is a standalone identity plan rather than a productivity suite. If the nonprofit needs collaboration apps, mailbox services, or storage, it should evaluate a Microsoft 365 nonprofit suite instead of only Entra ID P1.

Does Microsoft Entra ID P1 include or qualify us for Microsoft 365 Copilot?

No, Microsoft Entra ID P1 by itself does not include Microsoft 365 Copilot, because Copilot is a separate Microsoft 365 add-on with its own qualifying base-license requirements. Entra ID is part of the identity foundation for Microsoft cloud access, but a charity still needs the appropriate Microsoft 365 licensing and Copilot eligibility confirmed before purchase.

Does Microsoft Entra ID P1 include Intune device management or Microsoft Defender security products?

No, Microsoft Entra ID P1 does not include Microsoft Intune or Microsoft Defender products, because it is licensed as a standalone identity and access management plan. A nonprofit that needs endpoint management, device compliance policies, endpoint protection, email security, or broader security operations should license those products separately or consider a Microsoft 365 security bundle.

How does Microsoft Entra ID P1 improve security for a nonprofit?

Microsoft Entra ID P1 improves nonprofit sign-in security by enabling Conditional Access and related identity controls, because policies can control access using supported signals such as user, group, device, app, and location. It helps reduce identity risk, but it is not a full security suite and does not replace Defender, Intune, data protection, or Entra ID P2 risk-based identity features.

Is Microsoft Entra ID P1 (Non-Profit Pricing) a donated nonprofit grant?

No, this listing is for the paid nonprofit-priced Microsoft Entra ID P1 SKU, because the CSP offer is separate from any donated grant entitlement. Charity pricing generally requires the tenant to have current Microsoft nonprofit eligibility, and eligibility should be confirmed before ordering.

Is there a trial for Microsoft Entra ID P1 (Non-Profit Pricing)?

No, the listed Microsoft Entra ID P1 nonprofit CSP offer does not include a trial, because the available Charity options are paid commitment choices. If a nonprofit wants to test a specific feature before purchase, it should ask IT Partner to confirm whether Microsoft currently offers any separate evaluation path or pilot approach.

What billing and commitment options are available for Microsoft Entra ID P1 charity licensing?

Microsoft Entra ID P1 (Non-Profit Pricing) is available to Charity customers as a monthly commitment with monthly billing, an annual commitment paid upfront, or an annual commitment paid monthly, because the CSP configurator supports those payment structures. Annual upfront is typically the lowest listed per-seat option, annual paid monthly provides budget spreading, and monthly commitment provides the most flexibility.

Can we add, reduce, or cancel Microsoft Entra ID P1 nonprofit seats after purchase?

You can usually add Microsoft Entra ID P1 seats during a term, because CSP subscriptions support increasing seat counts as needs grow. Reductions and cancellations are more limited: monthly commitments provide more frequent flexibility, while annual commitments generally restrict seat reductions after the cancellation window until renewal; confirm the current CSP rules with IT Partner before ordering.

How should a nonprofit get started with Microsoft Entra ID P1 without disrupting users?

A nonprofit should start Microsoft Entra ID P1 by confirming eligibility, reviewing existing licenses, assigning P1 only to required users, and piloting Conditional Access policies, because identity changes can affect sign-in behavior across Microsoft and SaaS apps. A staged rollout with report-only or limited-scope policies where available helps reduce lockout risk before enforcing controls broadly.

Can we transfer our Microsoft Entra ID P1 CSP relationship to IT Partner without downtime?

Yes, moving a CSP relationship for Microsoft Entra ID P1 to IT Partner should be an administrative licensing change with no tenant migration or user downtime, because the Microsoft tenant, identities, data, and service configuration remain in place. IT Partner can quote the same Microsoft nonprofit CSP offer available for eligible Charity tenants at the time of transfer, but the final subscription and pricing details should be confirmed in the quote.

Should a nonprofit use Charity Entra ID P1, GCC, or GCC High for government or residency requirements?

A nonprofit should not assume Charity Microsoft Entra ID P1 is the same as GCC or GCC High, because government cloud environments have separate eligibility, compliance, residency, and procurement rules. If the organization has government contract, controlled data, or specific residency requirements, confirm with IT Partner whether a Government, GCC, or GCC High path is required before buying a Charity SKU.

Can schools, students, faculty, or commercial affiliates use Microsoft Entra ID P1 charity pricing?

Not automatically, because Microsoft Entra ID P1 (Non-Profit Pricing) is for eligible Charity tenants and is separate from Education and Commercial offers. Schools should evaluate Education licensing for student and faculty populations, and standard businesses or commercial affiliates should use Commercial licensing unless Microsoft eligibility specifically validates them for nonprofit pricing.

Didn’t find your question?

Ask it here. A real engineer answers by email within one business day — and if it’s a good one, it becomes part of this page so the next person finds it.

Answered by a person, one time, to your inbox. Nothing you type here is published without a human reviewing and anonymizing it first.

Same Microsoft price — more on your side

IT Partner helps nonprofits buy the right Entra licensing cleanly, without overspending on identity features they do not need yet.

  • CSP licensing guidance for nonprofit/Charity pricing and seat planning.
  • Help matching annual, annual-paid-monthly, and monthly commitment choices to your budget cycle.
  • Practical advice on which users need Entra ID P1 and which may already be covered by another Microsoft 365 plan.
  • Support for tenant setup, license assignment, and future upgrades if your nonprofit later needs Entra ID P2 or broader Microsoft 365 security.

Deploy it right

Microsoft SKUs for Microsoft Entra ID P1

Microsoft's catalog identifies this plan as ProductId CFQ7TTC0LFLS. Every full SKU below — the identifier format from Partner Center, Microsoft invoices, and o365hq.com quote links — resolves to this page, priced from the current US CSP price list. Ask us if your paperwork shows a SKU that isn’t listed.

Our SKU (order token)Microsoft SKUOfferPrice
CFQ7TTC0LFLS-001P-P1Y-ACFQ7TTC0LFLS:001PMicrosoft Entra ID P1 (Non-Profit Pricing) — Charity · 1-year commitment · annual billing$21.00/yr · $1.75/user/mo eq.
CFQ7TTC0LFLS-001P-P1Y-MCFQ7TTC0LFLS:001PMicrosoft Entra ID P1 (Non-Profit Pricing) — Charity · 1-year commitment · monthly billing$1.84/mo · $1.84/user/mo eq.
CFQ7TTC0LFLS-001P-P1M-MCFQ7TTC0LFLS:001PMicrosoft Entra ID P1 (Non-Profit Pricing) — Charity · 1-month commitment · monthly billing$2.10/mo · $2.10/user/mo eq.

Format: ProductId-SkuId-Term-Billing(A = annual billing, M = monthly, T = triennial). Prices are Microsoft ERP for the segment shown and change with Microsoft’s monthly price list.

Changed this month: Microsoft updated this plan’s catalog entry in the current price list. If you’re renewing soon, it’s worth a quick check that your commitment still makes sense — we’ll flag it in any quote.