The MIP Classifier extensions allows you to extract your Microsoft Information Protection (MIP) security labels and use them to create an entity type in SkySyncthe MIP entity type to create tracking group assignment rules for your policies. This requires you to register an application in your Microsoft Azure account to obtain the Application (Client) ID and Directory (Tenant) ID required to allow SkySync DryvIQ to access the security labels through the Microsoft Information Protection Sync Service.
...
Log into your Microsoft Azure account using an administrator account.
Select Azure Active Directory.
Select Add and select App registration.
Enter a name for the app in the Name field.
Under Supported account types, select Accounts in this organizational directory only ([company name] only- Single tenant).
Select Register.
Under Mange , select Authentication.
Set the Enable the following mobile and desktop flows option at the bottom of the page to Yes.
Select Save at the top of the page.
Under Manage, select API Permissions.
Select Add a permission.
In the Request API Permissions panel, select Azure Rights Management Services.
Select the Delegated Application permissions option.
Select the user_impersonation Content.DelegatedReader box.
Select the Content.DelegatedWriter box.
Select the Content.SuperUser box.
Select the Content.Writer box.
Select Add permissions.
You will be back on the API Permissions Page. Select Add a permission again.
Select APIs my organization uses.
In the search box, type “Microsoft Information Protection Sync Service” and select this option in the results list.
Select Delegated Application permissions.
Select the UnifiedPolicy.UserTenant.Read box.
Select Add permissions.
Select Grant admin consent for [company name]."
Select Yes when prompted to confirm you want to grant admin consent.
.
Select Certificates & secrets.
Select New client secret.
Enter a description in the Description field.
Select Add.
Copy the new Client Secret Value. It is needed for the extension configuration.
Select Overview.
Copy the Application (client) ID and the Directory (tenant) ID. Both are needed for the extension configuration.
Adding the Classifier Settings
In SkySyncDryvIQ, select the Setting icon (gear) in the top-right side of the menu bar.
Select the ellipses (…) on the mip-classifier tile and select Configure.
Enter the Tenant ID, Client ID, and Tenant ID Client Secret for the registered app you created in the “Registering the App” section.
Enter the Username and Password for the account that needs to be used to access the Microsoft security labels. This Microsoft tenant user must have sufficient rights to be able to read the labels.If the information you enter invalid, you will receive an error message indicating which information can’t be authorized and needs to be fixed.
Select Done.
| Info |
|---|
If the MIP Classifier extension is not installed, you will need to install it using the standard extension installation steps. |