Azure Active Directory vs. Azure Active Directory Premium

Enterprise SLA of 99.9 percent

No limit to the number objects

No limit to the number of SSO applications

Group-based provisioning of services

Self-service group management

Self-service password reset (and that password when synchronized then replicates to on-premises Active Directory, providing a cloud-based password reset capability)

Advanced security reports based on learning of how users log on to alert to suspicious logon behavior (which can then integrate the multifactor authentication so the next time a suspicious user logs on they must use another factor of authentication)

Usage reporting

Customized branding on the logon and access pages

Multifactor authentication such as requiring answering a call, text message, and mobile application to log on

Licenses for Microsoft Forefront Identity Manager to be used on-premises to enable synchronization of other directories and so on