Company Branding (Logon Pages/Access Panel customization)
Application Proxy
Advanced group features
Self-Service Password Reset/Change/Unlock with on-premises writeback
Device objects two-way synchronization between on-premises directories and Azure AD (Device write-back)
Multi-Factor Authentication (Cloud and On-premises (MFA Server))
Microsoft Identity Manager user CAL
Cloud App Discovery
Connect Health
Automatic password rollover for group accounts
Conditional Access based on group and location
Conditional Access based on device state (Allow access from managed devices)
3rd party identity governance partners integration
Terms of Use
SharePoint Limited Access
OneDrive for Business Limited Access
3rd party MFA partner integration (preview)
Microsoft Cloud App Security integration
Join a device to Azure AD, Desktop SSO, Windows Hello for Azure AD, Administrator BitLocker recovery
MDM auto-enrollment, Self-Service BitLocker recovery, Additional local administrators to Windows 10 devices via Azure AD Join, Enterprise State Roaming
Security/Usage ReportsAdvanced reports
Microsoft Intune
Mobile Device Management
Mobile application management
Integrated PC management
Integrated on-premises management
Cloud app security
Discovered cloud apps750+
Deployment for discovery analysisManual log upload
Data loss prevention (DLP) supportUses existing Office DLP
App permissions and ability to revoke access
Anomaly detection and behavioral analyticsOffice 365 apps
Manual and automatic alert remediation
SIEM connectorOffice 365 alerts only
Integration to Microsoft Intelligent Security Graph
Activity policies
Azure Information ProtectionPlan 1
Document classification
Bring your own key (BYOK)
Protection for content in Microsoft services
On-premises Windows Server file shares content protection
On-premises Exchange and SharePoint content protection
Custom templates
Azure Information Protection developer kit
Document tracking and revocation
Protection for non-Microsoft Office file formats
Protected content consumption for policy-aware apps
Protected content creation
Office 365 Message Encryption
Administrative control
Azure Multi-Factor Authentication
Azure Rights Management
Mobile Device Management for Office 365
Business apps
Planner
StreamView only
View videos created by others only
StaffHub
FlowFlow for Office 365 F1
Automated workflowsUnlimited
Flow frequency15 minutes
Mobile access to Flow
Templates
Public publishing
Connect Flow to cloud-based services
Create custom connectors for Flow1
Runs per month750
PowerApps
Connect PowerApps to cloud-based services
Collaborate with co-workers on apps
Easily share apps with your organization using AppSource
Run apps in a browser or PowerApps mobile for iOS and Android
Run apps offlineBasic for canvas apps
Run canvas apps in context of Office 365
Supports data policies established by the Office 365 administrator