Home › Guides › Identity & Security
Best Password Manager for a Small Microsoft 365 Office
If you run a 5–50 person office on Microsoft 365, the password manager to buy is the one whose plan lets staff sign in with their Microsoft 365 account and lets Entra ID remove leavers automatically. That one requirement decides which plan tier you need, and the tier decides the price. Here are the business plans of Keeper, NordPass, 1Password and Bitwarden side by side, with the prices from each vendor's own pricing page.
The short answer
- The plan with Entra ID single sign-on costs about $6 per user per month at Keeper (Enterprise), NordPass (Enterprise) and Bitwarden (Enterprise). At 1Password it's the Business plan, at $8.99.
- The cheaper plans at Keeper and NordPass don't include Entra ID SSO or automatic provisioning. You'd add and remove people by hand.
- Bitwarden Teams ($4.00) is the one lower-priced plan in this group that lists SCIM provisioning. Entra ID can then create and remove accounts, but people still unlock with a master password instead of their Microsoft 365 sign-in.
- My recommendation is in Which to pick below.
Business plans compared
All prices: per user per month, billed annually, U.S. dollars, from the vendor's pricing page (prices checked Oct 2026). "Entra ID SSO" means staff sign in with their Microsoft 365 work account. "Provisioning" means Entra ID creates, updates and removes accounts automatically (SCIM).
| Vendor and plan | Price | Entra ID SSO | Provisioning from Entra ID | Admin features the vendor lists |
|---|---|---|---|---|
| Keeper Business Starter | $2.00. Keeper says it's for 5–10 users. (Keeper pricing) | No | No | Admin console, policy engine, encrypted vault and sharing |
| Keeper Business | $4.00 (Keeper pricing) | No | No | Adds shared team folders, delegated administration, and vault transfer when an employee leaves |
| Keeper Enterprise | $6.00. Keeper's FAQ says Enterprise "starts at" this price, and the plan is sold through a quote. (Keeper pricing) | Yes (SAML 2.0) | Yes (SCIM, Entra ID integration) | Adds role-based access control, advanced two-factor options, and developer APIs |
| NordPass Teams | $1.99, sold as a 10-user pack only (NordPass pricing) | No. NordPass lists SSO with Google Workspace only on this plan. | No | User activity monitoring, security settings applied to all users, MFA |
| NordPass Business | $3.99, 5 users minimum (NordPass pricing) | No | No | Adds group-based sharing, sharing by folder, password strength and data breach monitoring |
| NordPass Enterprise | $5.99, 5 users minimum (NordPass pricing) | Yes (Entra ID, MS ADFS, Okta) | Yes ("automatic user access management via Entra ID") | Adds central control and tracking of shared credentials, Microsoft Sentinel and Splunk integrations |
| 1Password Teams Starter Pack | $24.95 per month for up to 10 users (1Password shows this as $2.49 per user). You can add up to 10 more seats at $4.99 per seat per month. (1Password pricing) | No. 1Password lists Entra ID integration as a Business feature. | No | Password sharing, security alerts, role-based permissions |
| 1Password Business | $8.99, 1 user minimum (1Password pricing) | Yes ("Unlock with SSO") | Yes (provisioning with Azure AD, now Entra ID) | Adds Watchtower alerts and role-based vault sharing and permissions |
| Bitwarden Teams | $4.00 (Bitwarden pricing) | No | Yes (SCIM) | Event logs, directory sync, secure sharing |
| Bitwarden Enterprise | $6.00 (Bitwarden pricing) | Yes (SAML 2.0 or OpenID Connect) | Yes (SCIM) | Adds enterprise policies, granular access control, and the option to self-host |
Where each vendor documents its Entra ID setup: Keeper (Microsoft Learn), NordPass provisioning (Microsoft Learn), 1Password SSO and 1Password provisioning, Bitwarden SCIM.
What it costs for a 15-person office
Worked example using the list prices above for the cheapest plan with both Entra ID SSO and provisioning. The arithmetic is users × price per user per month × 12 months.
| Plan | Arithmetic | Per year |
|---|---|---|
| Keeper Enterprise | 15 × $6.00 × 12 | $1,080.00 (Keeper quotes this plan, so your price may differ) |
| NordPass Enterprise | 15 × $5.99 × 12 | $1,078.20 (first-term discounted price) |
| 1Password Business | 15 × $8.99 × 12 | $1,618.20 |
| Bitwarden Enterprise | 15 × $6.00 × 12 | $1,080.00 |
| Bitwarden Teams (provisioning, no SSO) | 15 × $4.00 × 12 | $720.00 |
For scale, Microsoft 365 Business Premium for the same 15 people is 15 × $22.00 × 12 = $3,960 a year at Microsoft's list price (prices checked Oct 2026, Business Premium product page). See what Business Premium costs to run.
Which to pick
This section is my opinion, based on the published plans above and on what I'd want as the admin of a small Microsoft 365 office. I haven't run a hands-on test of these four products for this guide.
- If you want sign-in with Microsoft 365 and automatic removal of leavers (my default recommendation for 10 or more people): Keeper Enterprise, NordPass Enterprise or Bitwarden Enterprise. Their list prices are within a cent of each other, so pick on the free trial. Have two or three staff use each one for a week and choose the one they actually keep using.
- If budget is tight but you still want offboarding handled by Entra ID: Bitwarden Teams. Provisioning is the part that matters most when someone leaves. Single sign-on is the convenience part.
- If you're under 10 people and nobody leaves often: a starter plan (Keeper Business Starter, NordPass Teams or 1Password Teams Starter Pack) is fine. Put "remove them from the password manager" on your offboarding checklist, because nothing will do it for you.
- If your staff already use 1Password at home, or you want it for other reasons: 1Password Business has Entra ID SSO and provisioning. It costs about $3 more per user per month than the others at list price.
- If you need to host it yourself: Bitwarden is the only one of the four that lists self-hosting (on Enterprise).
Whichever you pick, check two things before you pay. First, the email in the password manager has to match each person's Entra ID sign-in name (NordPass and 1Password both say so in their setup docs). Second, find out how an admin recovers access when someone forgets their master password.
Where to start a trial
Keeper Business · NordPass Business · 1Password Business · Bitwarden Business
Bitwarden is listed on the same terms as the others. Whether a vendor has an affiliate program doesn't change its place in the table or the recommendation.
After you buy
The rollout steps are the same for all four: a pilot security group, SSO, then provisioning, then moving shared passwords out of spreadsheets. They're in Rolling it out. If you're on Business Premium, your Conditional Access policies also apply to the password manager sign-in once SSO is on.
Sources
- Keeper Business pricing (Keeper)
- NordPass Business plans and pricing (NordPass)
- 1Password Business and Teams pricing (1Password)
- Bitwarden Business pricing (Bitwarden)
- Configure Keeper Password Manager for single sign-on (Microsoft Learn)
- Configure NordPass for automatic user provisioning (Microsoft Learn)
- How to enable Microsoft Entra ID SSO in NordPass (NordPass)
- Configure Unlock with SSO using Microsoft Entra ID (1Password)
- Set up 1Password automated provisioning with Entra ID (1Password)
- About SSO (Bitwarden)
- Microsoft Entra ID SCIM integration (Bitwarden)
- What is app provisioning in Microsoft Entra ID? (Microsoft Learn)
- Microsoft 365 Business Premium (Microsoft)