Compare Cloud Identity features & editions

See the tables below for the differences between Cloud Identity Premium Edition and the free edition.

Note: For a list of features for different Google Workspace editions, see Compare Google Workspace editions.

Choose between free and premium service

Open all   |   Close all

Device management

Note: License requirements are by user, not by device. Any users who want to sign in to a managed device must have a supported license for a feature to apply.

Fundamental endpoint management

The following features are available by default.

	Cloud Identity Free	Cloud Identity Premium
Basic mobile device management	✔	✔
Basic passcode enforcement (mobile)	✔	✔
Remote account wipe (mobile)	✔	✔
Fundamental management for computers	✔	✔
Company owned computers	✔	✔
Remote sign-out (computers)	✔	✔
Endpoint verification	✔	✔
Google Credential Provider for Windows	✔	✔
Device inventory	✔	✔
Basic device reports	✔	✔
Network management	✔	✔
Android app management		✔

Advanced endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management. Advanced endpoint management also includes all the features listed for Fundamental endpoint management.

	Cloud Identity Free	Cloud Identity Premium
Advanced mobile device management		✔
Standard and strong passcode enforcement		✔
Mobile device security policies		✔
iOS app management		✔
Device approvals		✔
Block devices		✔
Remote device wipe (mobile)		✔
Android work profiles		✔
Advanced device reports		✔

Enterprise endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management and are restricted to the Premium edition. Enterprise endpoint management also includes all the features listed for Fundamental endpoint management and the features listed for Advanced endpoint management.

	Cloud Identity Free	Cloud Identity Premium
Company owned Android devices		✔
Company owned iOS devices		✔
iOS data protection		✔
Remote device wipe (Windows)		✔
Devices audit log		✔
Report inactive company owned devices		✔
Selectively distribute mobile apps		✔
Windows device management		✔
Management rules		✔
Mobile device certificates		✔
Context-Aware Access		✔

Directory

	Cloud Identity Free	Cloud Identity Premium
Basic directory management	✔	✔
Organizational units and groups	Unlimited	Unlimited
User lifecycle management	✔ *	✔
Admin managed groups	✔	✔
Groups for Business	✔	✔
Google Cloud Directory Sync (Synchronize Active Directory and LDAP directories with Google)	✔	✔
Admin roles and privileges	✔	✔
Google Admin App for Android	✔	✔
Google Admin App for iOS	✔	✔
Admin SDK/API	✔	✔
Secure LDAP		✔

* The Cloud Identity free edition increases your user cap by 50. To learn more, see Your Cloud Identity free edition user cap.

Security

	Cloud Identity Free	Cloud Identity Premium
User security management	✔	✔
Self-service password recovery	✔	✔
2-Step verification (2SV) including security key management	✔	✔
2SV enforcement controls	✔	✔
2SV enforcement controls with security key management	✔	✔
2SV enforcement controls with security key enforcement	✔	✔
Password strength alert	✔	✔
Password management	✔	✔
First-party session management		✔
Google security center		✔
Context-Aware Access		✔
Data Loss Prevention (DLP)		✔

Note: Some features in the security center, for example, data related to Gmail and Google Drive, aren't available with Cloud Identity Premium.

Single sign-on (SSO) and automated provisioning

	Cloud Identity Free	Cloud Identity Premium
Set up SSO using Google as an identity provider (IdP) to access a pre-integrated list of third-party SAML apps	Unlimited	Unlimited
Set up SSO using Google as an IdP to access custom SAML apps	✔	✔
Set up SSO using a third-party IdP with Google as a service provider	✔	✔
Automated user provisioning		✔

Reporting

	Cloud Identity Free	Cloud Identity Premium
Admin audit log	✔	✔
Login audit log	✔	✔
Security reports	✔	✔
SAML audit log	✔	✔
Groups audit log	✔	✔
Token audit log	✔	✔
App reports	✔	✔
Account activity reports	✔	✔
Devices audit log		✔
Auto export audit logs to BigQuery		✔

Chrome Browser

	Cloud Identity Free	Cloud Identity Premium
User Policies/Reporting	✔	✔
Chrome Sync	✔	✔

Billing and support

	Cloud Identity Free	Cloud Identity Premium
Billing		✔
Subscription and license management	✔	✔
Support	Community Support  (also includes 24x7 Email, Phone, and Chat if you paid for Cloud support or G Suite)	24x7 Email, Phone, Chat
SLA		99.9%

Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.