A device and identity management bundle combining Entra ID P1 (SSO, MFA, Conditional Access), Microsoft Intune (mobile device and app management), and Azure Information Protection P1 (document encryption and rights management). The foundational security layer included in Microsoft 365 E3, giving organisations control over how corporate data is accessed and shared across devices.