No more typing reviews! Try our Samantha, our new voice AI agent.

Cloudflare One vs Microsoft Entra ID comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 5, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare One
Ranking in Access Management
11th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
23
Ranking in other categories
Email Security (20th), Secure Web Gateways (SWG) (12th), Data Loss Prevention (DLP) (24th), Cloud Access Security Brokers (CASB) (13th), Distributed Denial-of-Service (DDoS) Protection (8th), Software Defined WAN (SD-WAN) Solutions (14th), Bot Management (4th), ZTNA as a Service (7th), ZTNA (5th), Secure Access Service Edge (SASE) (9th), Remote Browser Isolation (RBI) (2nd)
Microsoft Entra ID
Ranking in Access Management
1st
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
278
Ranking in other categories
Single Sign-On (SSO) (2nd), Authentication Systems (1st), Identity Management (IM) (3rd), Identity and Access Management as a Service (IDaaS) (IAMaaS) (1st), Microsoft Security Suite (2nd)
 

Mindshare comparison

As of November 2026, in the Access Management category, the mindshare of Cloudflare One is 3.7%, up from 3.3% compared to the previous year. The mindshare of Microsoft Entra ID is 9.9%, down from 21.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Access Management Mindshare Distribution
ProductMindshare (%)
Microsoft Entra ID9.9%
Cloudflare One3.7%
Other86.4%
Access Management
 

Featured Reviews

CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
Stafin Jacob - PeerSpot reviewer
Microsoft 365 Security & Compliance Practice Lead at Invoke
Identity has become our central gatekeeper and has provided secure single sign-on for all users
Microsoft Entra ID can improve by focusing more on new passwordless methods and becoming a primary adopter. One feature we would like to see is the ability to have security questions for password resets. I know the current capability is phasing out, so we do not have an alternative method yet. Customers who already use security questions require a smoother transition for that capability to be available. My experience with the deployment has had some challenges, particularly around the Microsoft MFA campaigns. The hardest part is moving users from a different MFA provider to the Microsoft MFA provider, as it ultimately depends on user activity. In large enterprises with numerous users across various geographies, this transition takes time. If there are ways to exert more control around that process, it would improve the situation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The blocking feature is very good."
"Cloudflare Access is a stable solution."
"The solution has different options that can be used to differentiate DDoS attacks."
"Using Cloudflare One makes my work quite easy because for DDoS protection, all I need to do is understand the OSI model and click; it makes it easier than trying to write a command line or use a Linux command."
"I'm very satisfied with the environment and the dashboard."
"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
"Cloudflare DDoS is better than its competitors for its security, deployment, and scalability."
"It's a perfect solution from my perspective; it's easy to understand and easy to configure."
"Let's say we decide that our users need to have MFA, multi-factor authentication. It is very easy to implement that with Azure Active Directory."
"The tool's most valuable feature is auto logs. It helps with user activity and monitoring. It also assists us with GLBA policies and procedures. Microsoft Entra ID gives a 360 view of what the user has access to, what applications are available to them, when they are logging in and out, etc. It makes knowing what is happening to our tenants incredibly powerful."
"Over the years, the performance of this particular technology has greatly improved, customers see much more robust performance from that technology and it gives them an easy way to set up their environments."
"It certainly centralizes usernames, and it certainly centralizes credentials. Companies have different tolerances for synchronizing those credentials versus redirecting to on-prem. The use case of maturing into the cloud helps from a SaaS adoption standpoint, and it also tends to be the jumping-off point for larger organizations to start doing PaaS and infrastructure as a service. So, platform as a service and infrastructure as a service kind of dovetail off the Active Directory synchronization piece and the email and SharePoint. It becomes a natural step for people, who wouldn't normally do infrastructure as a service, because they're already exposed to this, and they have already set up their email and SharePoint there. All of the components are there."
"User and device management is the most valuable feature."
"The most valuable features in Active Directory are the password writeback product and the MDM technology."
"Application integration is easy. MFA and password self-service have reduced most of the supportive work of IT. We use multi-factor authentication. Every access from a user is through multi-factor authentication. There is no legacy authentication. We have blocked legacy authentication methods. For people who use the MDM on mobile, we push our application through Intune. In a hybrid environment, users can work from anywhere. With Intune, we can push policies and secure the data."
"It's pretty easy to implement."
 

Cons

"Automation could be improved where you can easily add a TLS and SSL certificate to an application or web app if the developer did not include it."
"Cloudflare DDoS has poor technical support."
"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."
"The tool should provide on-premise versions. Currently, all versions are cloud-based."
"The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."
"Operating and tuning the product is difficult."
"The software has automated alerts, but the automated alerts are not available in the mobile app."
"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."
"The issue with Microsoft Customer Service is that we have many experts in our IT department, including myself as an Entra expert, Exchange experts, and other specialists. When we contact Microsoft Support, it does not matter that we are experts; we must start at the very bottom."
"Initially, we wanted to exclude specific users from MSA. So, we had a condition policy, which forces MSA for all the users. So we wanted to exclude users who are using an NPS extension. So it was not listed, as a NPS extension was not listed outside an application, in actual, so, we go back and were not able to exclude users using NPS extension from MSA. So that was one limitation that we found and we had to work around that."
"I would like to see Microsoft communicate how they intend to manage legacy applications. Right now, you still have to deploy a hosted domain server (which comes at an extra cost) if you have a legacy application that cannot sync properly with the enterprise applications and the modern applications."
"One area that can be improved is ensuring that detailed documentation is being produced in a timely fashion. There have been many instances where documentation either hasn't been updated to reflect recent changes or is either non-existent or not very accessible."
"When it comes to identity governance, the governance features in Azure AD are very focused on Microsoft products. I would like to see those governance and life cycle management features offered for non-Microsoft products connected to Azure AD."
"The technical support has room for improvement."
"They can simplify and provide more information about adding or updating a phone number or email id in the MSA account."
"Role-based access controls."
 

Pricing and Cost Advice

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"The prices are slightly expensive."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"Cloudflare Zero Trust Platform's pricing is good."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"The solution's pricing lacks transparency."
"The solution is not that expensive."
"I think we're on the E3 — I think it was about 35 dollars per user."
"For you to make use of some of the security features, you need to upgrade your licenses. If it is possible, could they just make some features free? For instance, for the Condition Access policy, you need to set that up and be on Azure AD P2 licensing. So if they could make it free or reduce the licensing for small businesses, that would be cool, as I believe security is for everyone."
"The solution costs us 60,000 Rupees annually, just over $700, and there are no additional costs."
"It is bundled with other services and the pricing is quite reasonable."
"We are a non-profit organization, so we get good prices from Microsoft for their products. It is working well, but it could be cheaper. For the type of organization we are, it would be good if they could give a little bit more and be more generous like Google, which has completely free services. Microsoft has free versions or web services called Office 365 E1, which is free for use, but we want to have it with more qualified clients."
"For a small business buying individual licenses, it is an affordable solution."
"Microsoft Authenticator is included in the package when we purchase a license from Microsoft."
"If you have a different IDP today, I would take a close look at what your licensing looks like, then reevaluate the licensing that you have with Microsoft 365, and see if you're covered for some of this other stuff. Folks sometimes don't realize that, "Oh, I'm licensed for that service in Azure." This becomes one of those situations where you have the "aha" moment, "Oh, I didn't know we can do that. Alright, let's go down this road." Then, they start to have conversations with Microsoft to see what they can gain. I would recommend that they work closely with their TAM, just to make sure that they are getting the right level of service. They may just not be aware of what is available to them."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
18%
Comms Service Provider
10%
Outsourcing Company
9%
Financial Services Firm
8%
Outsourcing Company
13%
Financial Services Firm
10%
Manufacturing Company
8%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Large Enterprise13
By reviewers
Company SizeCount
Small Business91
Midsize Enterprise42
Large Enterprise162
 

Questions from the Community

What needs improvement with Cloudflare Zero Trust Platform?
In my opinion, Cloudflare One can be improved mainly through compatibility, as the integration should be much simpler because it is currently too closed and too proprietary. Regarding additional fe...
What is your primary use case for Cloudflare Zero Trust Platform?
Cloudflare One's primary use case for my organization is to protect servers and to provide remote access with the VPN, strong authentication, and DDoS protection. The integration of Secure Web Gate...
How does Duo Security compare with Microsoft Authenticator?
We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Duo for 30 days, and we could not be happier. Duo Security is easy to configure a...
What is your experience regarding pricing and costs for Azure Active Directory?
I primarily use Microsoft Entra ID's free tier, so I have not faced any issues with pricing; I hope this free tier remains available for some time.
What needs improvement with Azure Active Directory?
To improve Microsoft Entra ID, I believe it should be openable with third-party applications to use Microsoft Authenticator, which is currently tied to Entra. There should definitely be a way to re...
 

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
Azure AD, Azure Active Directory, Azure Active Directory, Microsoft Authenticator
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

23andMe
Microsoft Entre ID is trusted by companies of all sizes and industries including Walmart, Zscaler, Uniper, Amtrak, monday.com, and more.
Find out what your peers are saying about Cloudflare One vs. Microsoft Entra ID and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.