Microsoft Entra Private Access
Explore the new identity-centric Zero Trust Network Access (ZTNA) solution.
Microsoft Mechanics: Entra Private Access in Action
Learn how Microsoft Entra Private Access helps secure on-premises apps with Conditional Access and multifactor authentication (MFA) without virtual private networks (VPNs), and discover the latest innovations introduced at Ignite.
Secure access to all private apps
Built on Zero Trust principles, Microsoft Entra Private Access helps remove risk while boosting user productivity. Quickly and securely connect users to private apps—on-premises and across any cloud.
Replace legacy VPN with ZTNA
Level up to ZTNA to quickly enable zero trust access to legacy, custom, and modern private apps for users connecting from anywhere, over any network.
Enforce adaptive Conditional Access across all private resources
Enforce Conditional Access controls across all your private apps and resources—including MFA, location-based security, advanced segmentation, and adaptive least-privilege access policies.
Deliver fast and easy access at global scale
Improve user productivity with fast and easy access powered by a vast global edge presence built on Microsoft’s global private network. Enable single sign-on across private apps and resources, whether they’re on-premises or in any cloud.
Microsoft Entra Private Access capabilities
Easily configure an alternative for legacy VPNs
Configure broad private IP ranges and fully qualified domain names (FQDNs) to quickly enable identity-centric Zero Trust-based access to all private resources.
Enforce MFA on legacy protocols
Set up modern authentication in front of legacy protocols such as Kerberos and New Technology LAN Manager (NTLM).
%20Per%20App%20Access%20(2)?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=2000&hei=1200&qlt=100&fit=constrain)
Enable adaptive per-app access
Configure granular per-app access controls for all private apps.
Optimize performance with intelligent local access
Deliver fast, seamless connectivity for hybrid users by dynamically routing traffic based on location while maintaining security.
Secure domain controllers with private access
Bring MFA to on-premises apps during local-to-local access and protect domain controllers from identity threats.
Extend private access to guest users
Provide external collaborators with least-privilege access to private apps in your organization.
Microsoft Entra Suite
Originally starting from $12.00 now starting from $12.00
$12.00 $12.00
user/month, paid yearly
(annual commitment)
Microsoft Entra Private Access is included in the Microsoft Entra Suite.
- Unify conditional access
- Ensure least privilege access
- Improve the user experience
- Modernize your on-premises infrastructure
The Microsoft Entra Suite delivers unified Zero Trust user access, enabling your employees to securely access any cloud and on-premises application, with least privilege access, across public and private networks inside and outside your corporate perimeter. The Microsoft Entra Suite combines network access, identity protection, identity governance, and identity verification solutions.
Strengthen identity fundamentals for the AI era
Secure access for your workforce with Microsoft Entra Suite
Secure access for your customers and partners
Secure access for agents
Additional resources
How Microsoft IT modernized secure access
See how Microsoft IT, as customer zero, unified identity and network access with Microsoft’s streaming SIMD extension (SSE) solution to cut risk and reduce VPN reliance.
Microsoft Entra Private Access datasheet
Learn more about the benefits of Microsoft Entra Private Access.
Microsoft Entra Private Access documentation
Learn how to manage, configure, and deploy Microsoft Entra Private Access from the Microsoft Entra admin center.
Follow Microsoft Security