A standalone license that secures non-human identities — applications, service principals, and managed identities used for service-to-service access. Adds Conditional Access and Identity Protection for workload identities, plus risk detection for compromised or inactive credentials — a separate SKU not bundled into any Microsoft 365 or Entra suite.