Merge pull request #251722 from rwike77/faq

Updated licensing FAQ

Author: prmerger-automator[bot]

articles/active-directory/workload-identities/workload-identities-faqs.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: workload-identities
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 8/28/2023
+ms.date: 9/15/2023
 ms.author: gasinh
 ms.reviewer: 
 ms.custom: aaddev 
@@ -94,26 +94,12 @@ applications for connecting resources that support Azure AD authentication.
 
 ## How many licenses do I need to purchase? Do I need to license all workload identities including Microsoft and Managed Service Identities? 
 
-All workload identities - service principles, apps and managed identities, configured in your directory for a Microsoft Entra
-Workload Identities Premium feature require a license. Select and prioritize the identities based on the available licenses. Remove
-the workload identities from the directory that are no longer required.
+All workload identities - service principles, apps and managed identities, configured in your directory for a Microsoft Entra Workload Identities Premium feature require a license. Customers don’t need to license all the workload identities. You can find the right number of Workload ID licenses with the following guidance:
 
-The following identity functionalities are currently available to view
-in a directory:
-
-- Identity Protection: All single-tenant and multi-tenant service
-  principals excluding managed identities and Microsoft apps.
-
-- Conditional Access: Single-tenant service principals (excluding
-  managed identities) capable of acting as a subject/client, having a
-  defined credential.
-
-- Access reviews: All single-tenant and multi-tenant service
-  principals assigned to privileged roles.
-
->[!NOTE]
->Functionality is subject to change, and feature coverage is
-intended to expand.
+1. Customer will need to license enterprise applications or service principals ONLY if they set up Conditional Access policies or use Identity Protection for them.
+2. Customers don't need to license applications at all, even if they are using Conditional Access policies.
+3. Customers will need to license managed identities, only when they set up access reviews for managed identities.
+You can find the number of each workload identity type (enterprise apps/service principals, apps, managed identities) on the product landing page at the [Microsoft Entra admin center](https://entra.microsoft.com).
 
 ## Do these licenses require individual workload identities assignment?