Compare Cloud Identity features & editions

Fundamental endpoint management

The following features are available by default.

	Cloud Identity Free	Cloud Identity Premium
Basic mobile device management	✔	✔
Basic passcode enforcement (mobile)	✔	✔
Remote account wipe (mobile)	✔	✔
Fundamental management for computers	✔	✔
Company owned computers	✔	✔
Remote sign-out (computers)	✔	✔
Endpoint verification	✔	✔
Google Credential Provider for Windows®	✔	✔
Device inventory	✔	✔
Basic device reports	✔	✔
Network management	✔	✔
Android app management		✔

Advanced endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management. Advanced endpoint management also includes all the features listed for Fundamental endpoint management.

	Cloud Identity Free	Cloud Identity Premium
Advanced mobile device management		✔
Standard and strong passcode enforcement		✔
Mobile device security policies		✔
iOS® app management		✔
Device approvals		✔
Block devices		✔
Remote device wipe (mobile)		✔
Android work profiles		✔
Advanced device reports		✔

Enterprise endpoint management

The following features require a Cloud Identity admin to enable advanced mobile management and are restricted to the Premium edition. Enterprise endpoint management also includes all the features listed for Fundamental endpoint management and the features listed for Advanced endpoint management.

	Cloud Identity Free	Cloud Identity Premium
Company owned Android devices		✔
iOS data protection		✔
Remote device wipe (Windows)		✔
Devices audit log		✔
Report inactive company owned devices		✔
Selectively distribute mobile apps		✔
Windows device management		✔
Management rules		✔
Mobile device certificates		✔
Context-Aware Access		✔

	Cloud Identity Free	Cloud Identity Premium
Basic directory management	✔	✔
Organizational units and groups	Unlimited	Unlimited
User lifecycle management	✔ *	✔
Admin managed groups	✔	✔
Groups for Business	✔	✔
Google Cloud Directory Sync (Synchronize Active Directory and LDAP directories with Google)	✔	✔
Admin roles and privileges	✔	✔
Google Admin App for Android	✔	✔
Google Admin App for iOS	✔	✔
Admin SDK/API	✔	✔
Secure LDAP		✔

* The Cloud Identity free edition increases your user cap by 50. To learn more, see Your Cloud Identity free edition user cap.

	Cloud Identity Free	Cloud Identity Premium
User security management	✔	✔
Self-service password recovery	✔	✔
2-Step verification (2SV) including security key management	✔	✔
2SV enforcement controls	✔	✔
2SV enforcement controls with security key management	✔	✔
2SV enforcement controls with security key enforcement	✔	✔
Password strength alert	✔	✔
Password management	✔	✔
First-party session management		✔
Google security center		✔
Context-Aware Access		✔

Note: Some features in the security center, for example, data related to Gmail and Google Drive, aren't available with Cloud Identity Premium.

	Cloud Identity Free	Cloud Identity Premium
Set up SSO using Google as an identity provider (IdP) to access a pre-integrated list of third-party SAML apps	Unlimited	Unlimited
Set up SSO using Google as an IdP to access custom SAML apps	✔	✔
Set up SSO using a third-party IdP with Google as a service provider	✔	✔
Automated user provisioning		✔

	Cloud Identity Free	Cloud Identity Premium
Admin audit log	✔	✔
Login audit log	✔	✔
Security reports	✔	✔
SAML audit log	✔	✔
Groups audit log	✔	✔
Token audit log	✔	✔
App reports	✔	✔
Account activity reports	✔	✔
Devices audit log		✔
Auto export audit logs to BigQuery		✔

	Cloud Identity Free	Cloud Identity Premium
User Policies/Reporting	✔	✔
Chrome Sync	✔	✔

	Cloud Identity Free	Cloud Identity Premium
Billing		✔
Subscription and license management	✔	✔
Support	Community Support  (also includes 24x7 Email, Phone, and Chat if you paid for Cloud Platform support or G Suite)	24x7 Email, Phone, Chat
SLA		99.9%