| Entra Internet Access | Identity-centric Secure Web Gateway — web content filtering, ZTNA for internet traffic, replaces third-party SWG tools like Zscaler | ? No |
| Entra Private Access | ZTNA for on-premises apps — replaces legacy VPN, per-app access with Conditional Access enforcement | ? No |
| Entra ID Governance (advanced) | Advanced identity governance beyond what P2 includes — advanced entitlement management, Lifecycle Workflows, advanced access reviews Microsoft Learn | ? No (P2 has basic only) |
| Entra Verified ID Premium | Face Check — biometric verification of government-issued IDs, 8 checks per user per month Wintive | ? No (basic Verified ID is free, Face Check is Suite-only) |