Enterprise Mobility + Security E5(EMS E5)Enterprise Mobility + Security E3 (EMS E3)Azure AD Premium Plan 2Azure AD Premium Plan 1Advanced Threat Analytics (retiring)Information ProtectionWindows Server CAL RightsConfig Manager Endpoint ProtectionActive Directory RMSAzure RMSAccess ReviewsIdentity ProtectionEntitlement ManagementRisk-Based Conditional AccessPrivileged Identity ManagementMFA Registration PolicyDefender for Cloud AppsRules-Based Classification (Client & Scanner)Defender for IdentityAdvanced Security Reports & AlertsSingle-Sign-On to other SaaSApp Proxy, including PingAccessMulti-Factor Auth (MFA)Azure AD Connect HealthCloud App DiscoveryShared Account Password Roll-OverSelf-Service Password Reset in ADSelf-Service Group ManagementConditional AccessExternal IdentitiesEnterprise State RoamingTerms of UsePassword ProtectionMicrosoft Identity Manager3rd Party MFA IntegrationAdministrative UnitsDynamic GroupsSMS Sign-InTemporary Access Passm365maps.comIntune Plan 1Application ManagementDevice ManagementConfig ManagerEndpoint Analytics