It’s hard to buy Azure AD alone, they push the EMS suite and O365 E5 to solve the security issues in O365 E3.