'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Does Microsoft 365 E5 Include Entra ID P2 for SSPR? Licensing Explained
Question details
Determine if the Microsoft 365 E5 subscription natively includes the Microsoft Entra ID Premium P2 license necessary for SSPR and password writeback.
- Product
- Microsoft 365 E5
- Device & OS
- not provided
- Scenario
- Verifying enterprise licensing requirements for enabling self-service password reset and on-premises Active Directory password writeback.
- Observed behavior
- The user wants to confirm if they need to purchase an additional Entra ID P1 or P2 license for E5 users to enable identity protection features.
Ensure you have access to the Microsoft 365 admin center with Global Administrator or Billing Administrator privileges to verify your organization's active licenses.
Confirming Microsoft Entra ID P2 Inclusion in Microsoft 365 E5
Microsoft 365 E5 natively includes Microsoft Entra ID Premium P2, covering all SSPR and password writeback requirements without extra costs.
Microsoft 365 E5 is the highest-tier enterprise subscription, and it automatically bundles Microsoft Entra ID Premium P2. Because Entra ID P2 encompasses all the capabilities of P1, your E5 users are already fully licensed for Self-Service Password Reset (SSPR) and password writeback to on-premises Active Directory.
You do not need to purchase separate Entra ID P1 or P2 licenses for users who already have an assigned Microsoft 365 E5 license. You simply need to ensure the service is enabled for the assigned users in your admin portal.
Navigate to admin.microsoft.com and click 'Sign In' using your administrator credentials.
On the left navigation menu, expand the 'Billing' section and click on 'Your products' or 'Licenses' to view your current active enterprise subscriptions.
Click on the 'Microsoft 365 E5' license and scroll down to the 'Included apps and services' section to visually confirm that 'Microsoft Entra ID Premium P2' is listed and the toggle is switched on for your users.
Looking for a Cost-Effective Office Suite? Try WPS Office
While enterprise security features like Entra ID P2 require premium Microsoft 365 subscriptions, your team's document productivity doesn't have to be expensive. WPS Office provides a free, lightweight, and highly compatible alternative for everyday Word, Excel, and PowerPoint tasks.
- 1. Download the Installer: Visit the official WPS website and click the 'Free Download' button to get the installer for your operating system.
- 2. Install WPS Office: Run the downloaded executable file and follow the on-screen prompts to complete the installation.
- 3. Start Creating Documents: Open WPS Office from your desktop to instantly view, edit, or create documents that are perfectly compatible with Microsoft Office.
Frequently Asked Questions
Do I need to buy Entra ID P1 if I already have Microsoft 365 E5?
No. Microsoft 365 E5 includes Entra ID Premium P2, which completely encompasses all features available in the P1 tier, including Self-Service Password Reset (SSPR) and multifactor authentication (MFA).
Does Microsoft 365 E3 also include Entra ID P2?
No, Microsoft 365 E3 includes Microsoft Entra ID Premium P1. While P1 does support SSPR, it lacks some advanced identity protection and risk-based conditional access features found in P2. You would need to upgrade to E5 or purchase P2 as an add-on.
How do I enable password writeback for my E5 users?
You need to configure Microsoft Entra Connect (formerly Azure AD Connect) on your on-premises directory server and check the 'Password Writeback' feature during setup. Afterwards, enable SSPR for your users within the Microsoft Entra admin center under the 'Password reset' menu.
