No more typing reviews! Try our Samantha, our new voice AI agent.

AWS Directory Service vs Microsoft Entra ID comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 2, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AWS Directory Service
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
18th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
16
Ranking in other categories
No ranking in other categories
Microsoft Entra ID
Ranking in Identity and Access Management as a Service (IDaaS) (IAMaaS)
1st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
278
Ranking in other categories
Single Sign-On (SSO) (2nd), Authentication Systems (1st), Identity Management (IM) (2nd), Access Management (1st), Microsoft Security Suite (2nd)
 

Mindshare comparison

As of October 2026, in the Identity and Access Management as a Service (IDaaS) (IAMaaS) category, the mindshare of AWS Directory Service is 1.0%, down from 1.6% compared to the previous year. The mindshare of Microsoft Entra ID is 16.4%, down from 23.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity and Access Management as a Service (IDaaS) (IAMaaS) Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID16.4%
AWS Directory Service1.0%
Other82.6%
Identity and Access Management as a Service (IDaaS) (IAMaaS)
 

Featured Reviews

Akram Zaki - PeerSpot reviewer
IT Specialist at FlairsTech
Hybrid directory service has streamlined global server access and supported reliable daily operations
Some features in AWS Directory Service are not automated and are not scriptable, so they require manual work. In today's world where everything is pretty much automated and scriptable using AI, this is a downside. The price is another concern. AWS is really expensive. They provide an awesome service in general, but it's still expensive, very expensive. AD Connector is an application which connects my own Active Directory to AWS Directory Service or AWS infrastructure. There is a bit of latency which is bound by the AD Connector availability. If the AD Connector is having issues, there is a bit of latency, but in general, it's way better than Microsoft Azure. Still, it could be better. The migration was a bit challenging and required intensive planning and migration time. That is always a hassle. No matter which cloud environment you're moving into, the migration is sensitive because you're generally moving from on-premise to a cloud environment, so there is downtime and there are unexpected issues and errors. It needs very careful planning before doing the migration itself. AWS Directory Service is lacking a few things which could be better. Single sign-on federation is missing. SCIM provisioning is not available. In my company, we use other services for SSO federation, SCIM provisioning, and authentication because of these gaps. I would like AWS Directory Service to enroll a multi-factor authentication method. I would like to have an SSO federation where users, if we're hosting applications in AWS, would not need to log in to each application. Single sign-on would log in the user to their account and from there they can open all their applications without requiring a login each time. One of the other cons in AWS is that directories cannot span multiple regions because it's a region-bound architecture. This requires several directories for multi-region deployment. This is the case on my end because my company has several branches all over the world, so it requires several deployments.
Stafin Jacob - PeerSpot reviewer
Microsoft 365 Security & Compliance Practice Lead at Invoke
Identity has become our central gatekeeper and has provided secure single sign-on for all users
Microsoft Entra ID can improve by focusing more on new passwordless methods and becoming a primary adopter. One feature we would like to see is the ability to have security questions for password resets. I know the current capability is phasing out, so we do not have an alternative method yet. Customers who already use security questions require a smoother transition for that capability to be available. My experience with the deployment has had some challenges, particularly around the Microsoft MFA campaigns. The hardest part is moving users from a different MFA provider to the Microsoft MFA provider, as it ultimately depends on user activity. In large enterprises with numerous users across various geographies, this transition takes time. If there are ways to exert more control around that process, it would improve the situation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The support is very good. I would rate the technical support as a nine out of ten."
"Two-step authentication is very useful and important."
"The most valuable feature is ease of use."
"Technical support is very knowledgeable and responds very quickly."
"I would rate AWS Directory Service nine out of ten."
"I like the manageability, as Activate Connect makes it easier to assign information and to manage the resources in the network."
"The solution integrates well with other tools, particularly through single sign-on, allowing users to connect to various applications using just one password, including email."
"The AD Connector is very good and easy to implement."
"The two-step authentication is the most valuable."
"Microsoft Entra ID deserves a ten out of ten rating."
"It is one of those costs where you can't really quantify a return on investment. In the grand scheme of things, if we didn't have it, we would probably have a lot more breaches. It would be a lot harder to detect issues because we would have people using static usernames and passwords for various sites, making us open to a lot more attacks. The amount of security and benefit that we get out of it is not quantifiable but the return of investment from a qualitative point of view is much higher than not having it."
"My advice for another organization considering Microsoft Entra ID is simple: if you are utilizing Microsoft Office applications and the Microsoft 365 suite, using Microsoft Entra ID as your primary identity provider is a no-brainer."
"I really love the Conditional Access feature of Microsoft Entra ID because it provides the security controls that we have sorely needed."
"We are satisfied with this solution because we use all of its features."
"Azure AD has features that have helped improve our security posture and our client's security posture."
"Microsoft Entra ID has helped us defend against token theft and nation-state attacks."
 

Cons

"AWS is really expensive. They provide an awesome service in general, but it's still expensive, very expensive."
"I'd rate the solution at a six out of ten, simply based on the cost. It's very expensive."
"Can be improved by including on-premises access for services through Identity Access Management."
"Currently, there is no option to integrate our on-premises Cisco AWS Directory Service, requiring some manual configuration. If AWS Active Directory Service provided additional domain controller functionalities, like other on-premises Active Directory, it would be very helpful."
"The AWS Directory Service should be easier to integrate."
"The solution lacks certain features."
"Our only complaint is that you cannot integrate your Exchange server. Or, if you are planning to install an Exchange server on your Amazon EC2 instance, then you need to configure Active Directory on EC2 instance. We would like for this limitation to be lifted."
"I would like to grant partial access to a table contained in a database without having to provide full access to the whole database."
"I would like it if Intune could manage MacOS or iOS directly. Right now, we have to use a third-party solution."
"My only pain point in this solution is creating group membership for devices."
"Azure AD provides two types of features. One is Azure AD Excel and is already B2C. Out of both versions, Azure B2C requires some improvement, in terms of user management and role management, et cetera."
"I would rate my customer service and technical support as about a five right now, as we just got in contact with our Microsoft rep, so it is improving."
"I'm not certain about the return on investment with Microsoft Entra ID."
"One thing that they need to improve is the cost."
"The robustness of the conditional access feature of the zero trust strategy to verify users is adequate but not comprehensive."
"I want to be able to identify the audiences effectively and manage them."
 

Pricing and Cost Advice

"The pricing is reasonable."
"AWS' pricing is fair, and costs can be cut if you look carefully at when you're using it."
"We pay an annual subscription fee."
"The pricing depends because with AWS there are two types of directory objects: 30,000 and 500,000. It varies. AWS provides the pricing calculators so we can get an estimate from there as per the company requirement of how many users and objects that we need to create. So we can go to that portal, put in the data, and get the quotation. There are no extra licensing fees. It's all included."
"The pricing is good; it's not cheap but very reasonable."
"We pay an annual subscription fee."
"The price of Azure Active Directory and Amazon AWS, are almost the same, but most people prefer Amazon AWS because they find it's a little cheaper to some extent and an easier platform to use."
"The solution has three types of tiers: E1 has very basic features. You get limited stuff in E2 and cannot have Office 360 associated with it. E3 is on the costly side and has all the features."
"MFA and P2 licenses for two Azures for fully-enabled scenarios and features cost a lot of money. This is where Okta is trying to get the prices down."
"Microsoft Entra ID's pricing is reasonable."
"The price is affordable, and we pay around $100 per month."
"It is a really nice tool and we have a license for the more complex model."
report
Use our free recommendation engine to learn which Identity and Access Management as a Service (IDaaS) (IAMaaS) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
11%
Computer Software Company
11%
Performing Arts
9%
Government
8%
Outsourcing Company
13%
Financial Services Firm
11%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise3
Large Enterprise5
By reviewers
Company SizeCount
Small Business91
Midsize Enterprise42
Large Enterprise162
 

Questions from the Community

What is your experience regarding pricing and costs for AWS Directory Service?
The pricing is very good because it is low and there is no management cost. You do not need to hire any system administrator to manage your Active Directory.
What needs improvement with AWS Directory Service?
Some features in AWS Directory Service are not automated and are not scriptable, so they require manual work. In today's world where everything is pretty much automated and scriptable using AI, thi...
What advice do you have for others considering AWS Directory Service?
I would like AWS Directory Service to enroll a multi-factor authentication method. I would like to have an SSO federation where users, if we're hosting applications in AWS, would not need to log in...
How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What is your experience regarding pricing and costs for Azure Active Directory?
I primarily use Microsoft Entra ID's free tier, so I have not faced any issues with pricing; I hope this free tier remains available for some time.
What needs improvement with Azure Active Directory?
To improve Microsoft Entra ID, I believe it should be openable with third-party applications to use Microsoft Authenticator, which is currently tied to Entra. There should definitely be a way to re...
 

Also Known As

AWS Managed Microsoft AD
Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator
 

Interactive Demo

 

Overview

 

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers
Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.
Find out what your peers are saying about AWS Directory Service vs. Microsoft Entra ID and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.