Azure Information Protection client: Installation and configuration for clients

Applies to: Azure Information Protection, Office 365

Relevant for: AIP unified labeling client and classic client


To provide a unified and streamlined customer experience, the Azure Information Protection classic client and Label Management in the Azure Portal are deprecated as of March 31, 2021. No further support is provided for the classic client and maintenance versions will no longer be released.

The classic client will be officially retired, and will stop functioning, on March 31, 2022.

All current Azure Information Protection classic client customers must migrate to the Microsoft Information Protection unified labeling platform and upgrade to the unified labeling client. Learn more in our migration blog.

The AIP unified labeling client is recommended for all Windows computers, because it installs an Office add-in that enables users to easily label and protect documents directly from the Office ribbon.

The client also offers:

  • Labeling and protection for file types that are not supported by the built-in protection service (Azure Rights Management).
  • A viewer for protected files that can't be opened by Office apps. There's a similar viewer for iOS and Android.
  • Features for tracking and revoking access to protected files.

Computers running Office 2010 require the Azure Information Protection client to authenticate to the Azure Information Protection service. Note that Office 2010 extended support ended on October 13, 2020. For more information, see AIP and legacy Windows and Office versions.

The Azure Information Protection client for Windows: Installation and configuration

For an enterprise installation and configuration of the client for Windows, see the Azure Information Protection unified labeling client administrator guide.

If you want to quickly install and test these clients for a single computer, see Download and install the Azure Information Protection unified labeling client.

Classic client only: If you have the classic client installed, use these links instead:

The Azure Information Protection app for iOS and Android: Installation and management

To install the Azure Information Protection app viewer for iOS and Android, use the links on the Microsoft Azure Information Protection page. No configuration is required.


For Mac computers, links from this page download the RMS sharing app. These computers do not support the Azure Information Protection client.

Integration with Intune

Because the Azure Information Protection viewer app uses the Microsoft Intune App Software Development Kit, when iOS and Android devices are enrolled by Intune, you can deploy and manage the Azure Information Protection viewer app for these devices:

  1. Add the Azure Information Protection app to Intune

  2. Do one or both of the following actions:

Additional information for when you add the Azure Information Protection app to Intune:

  • For iOS: Search for and add the app from Intune.

  • For Android: When you add the app, use the following Google Play URL:

Next steps

After you have installed and configured Azure Information Protection clients, you might need to learn more about how the client interprets the different usage rights that can be used to protect documents and emails. For more information, see Configuring usage rights for Azure Information Management.