By default, Microsoft Azure Information Protection works with Azure AD. To get started, sign up for Microsoft Azure Information Protection using an account in your instance of Azure AD. Enterprise Single Sign-On - Azure Active Directory supports rich enterprise-class single sign-on with Microsoft Azure Information Protection out of the box. Download the latest from Windows, Windows Apps, Office, Xbox, Skype, Windows 10, Lumia phone, Edge & Internet Explorer, Dev Tools & more.
Mar 16, 2020 Because the Azure Information Protection viewer app uses the Microsoft Intune App Software Development Kit, when iOS and Android devices are enrolled by Intune, you can deploy and manage the Azure Information Protection viewer app for these devices: Add the Azure Information Protection app to Intune. Do one or both of the following actions.
-->
Applies to: Azure Information Protection, Office 365
Relevant for: AIP unified labeling client and AIP classic client.
Note
To provide a unified and streamlined customer experience, the Azure Information Protection classic client and Label Management in the Azure Portal are deprecated as of March 31, 2021. While the classic client continues to work as configured, no further support is provided, and maintenance versions will no longer be released for the classic client.
We recommend that you migrate to unified labeling and upgrade to the unified labeling client. Learn more in our recent deprecation blog.
The applications and solutions listed on this page have built-in support for the Azure Rights Management (Azure RMS) service, which provides data protection for Azure Information Protection.
These applications and solutions are known as 'RMS-enlighted', and have Rights Management and usage restrictions tightly integrated using Rights Management APIs.
Note
Unless stated otherwise, the supported capabilities apply to both Azure RMS and AD RMS.
AD RMS support on iOS, Android, macOS, and Windows Phone 8.1 also requires the Active Directory Rights Management Services Mobile Device Extension.
Windows RMS-enlightened applications
CAD files, such as .dwg files, are supported by partner solutions, such as SealPath RMS plugin for AutoCAD and SECUDE's HALOCAD plugin.
macOS RMS-enlightened applications
Android RMS-enlightened applications
iOS RMS-enlightened applications
Windows 10 mobile RMS-enlightened applications
Blackberry 10 RMS-enlightened applications
Additional details about RMS-enlightened applications
For more information about the tables RMS-enlightened applications listed above, see:
Viewing protected content in email clients
When an email client protects a message, any Office files that are attached to the message, and are currently unprotected, are protected together with the email message. In such cases, both the email message and attachments can be viewed in the email client, by authorized recipients only.
However, if only the attachment is protected, but not the email message itself, the attachment cannot be previewed by the email client, even by authorized recipients.
Tip
For email clients that don't support protecting emails, consider using Exchange Online mail flow rules to apply this protection.
Supported text and image file types
File types other than Office files and email messages include text and image file types, with extensions such as .txt, .xml, .jpg, and .jpeg.
These files change their file name extension after they're natively protected by Rights Management, and then become read-only.
Files that cannot be natively protected have a .pfile file name extension after they are generically protected by Rights Management.
For more information, see the File types supported.
Microsoft 365 app support![]()
Includes:
Viewing protected documents in Office for the web
Supported only with Microsoft SharePoint and OneDrive, and the documents are unprotected before they are uploaded to a protected library.
Web browser support
Email clients using Exchange ActiveSync IRM
The following email clients use Exchange ActiveSync IRM, which must be enabled by the Exchange administrator:
Users can view, reply, and reply all for protected email messages but cannot protect new email messages.
If the email application cannot render the message because the Exchange ActiveSync IRM is not enabled, the recipient can view the email in a web browser when the sender uses Exchange Online, or Exchange on-premises in a hybrid configuration.
Azure RMS support for Office
Azure RMS is tightly integrated into the Word, Excel, PowerPoint, and Outlook apps, where this functionality is often referred to as Information Rights Management (IRM).
See also: Office Applications Service Description
Install Azure Information Protection ClientWindows computers for Information Rights Management (IRM)
The following Office client suites support protecting files and emails on Windows computers by using the Azure Rights Management service:
All editions of Office (with the exception of Office 2007) support consuming protected content.
Azure Rights Management service with Office Professional Plus 2010 and Service Pack 2 or Office Professional 2010 with Service Pack 2
When you use the Azure Rights Management service with Office Professional Plus 2010 and Service Pack 2 or Office Professional 2010 with Service Pack 2, you must also have the AIP client for Windows.
Additionally, this configuration:
Mac computers for Information Rights Management (IRM)
The following Office client suites support protecting files and emails on macOS by using Azure RMS:
All editions of Office for Mac 2019 and Office for Mac 2016 support consuming protected content.
Tip
If you are using the classic client on a Mac computer, you might find the following FAQ useful: How do I configure a Mac computer to protect and track documents?
Azure Information Protection apps for iOS and AndroidAzure Information Protection Client
The Azure Information Protection app for iOS and Android provides a viewer for rights-protected email messages (.rpmsg files) when these mobile devices don't have an email app that can open protected emails. This app can also open rights-protected PDF files, and pictures and text files that are rights-protected.
If your iOS and Android devices are enrolled by Microsoft Intune, users can install the app from the Company Portal and you can manage the app by using Intune's app protection policies.
For more information about how to use app, see the FAQ for Microsoft Azure Information Protection app for iOS and Android.
The Azure Information Protection client for Windows
To use Azure Information Protection, you must deploy the AIP client across your system.
Download the unified labeling client installation from the Microsoft Azure Information Protection page.
For more information, see:
AIP's classic clientMicrosoft Azure Information Protection Viewer For Mac Software
If you have not yet upgraded, you may still have the legacy Azure Information Protection classic client deployed.
For more information about deploying and using the classic client, see:
Note
To provide a unified and streamlined customer experience, the Azure Information Protection classic client and Label Management in the Azure Portal are deprecated as of March 31, 2021. While the classic client continues to work as configured, no further support is provided, and maintenance versions will no longer be released for the classic client.
We recommend that you migrate to unified labeling and upgrade to the unified labeling client. Learn more in our recent deprecation blog.
Rights Management sharing app
For Mac computers, the Rights Management sharing app offers a viewer for protected PDF files (.ppdf), protected text images, and generically protected files. It can also protect image files, but not other files. To protect Office files on these computers, use Office for Mac or Microsoft 365 Apps for Enterprise.
For more information, see the FAQ for Microsoft Rights Management Sharing Application for Mobile Platforms
Download the Rights Management sharing app for Mac computers from the Microsoft Azure Information Protection page.
![]() Other applications that support Azure Information Protection
In addition to the applications listed above, any application that supports the APIs for the Azure Rights Management service can be integrated with Azure Information Protection.
Azure Information Protection Labels
Examples may include line-of-business applications written in-house, or applications from software vendors, written using the RSM SDKs.
Applications that are not supported by Azure RMS
Applications not currently supported by Azure RMS include:
Microsoft Azure Information Protection Viewer For Mac Os
Next steps
See also:
For the latest information about solutions that support the Azure Rights Management service and Azure Information Protection, see the blog post, Microsoft Ignite 2019 – Microsoft Information Protection solutions Partner ecosystem showcase.
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |