Applications that support Azure Rights Management data protection

Applies to: Azure Information Protection, Office 365

Use the following tables to identify the applications and solutions that natively support the Azure Rights Management service (Azure RMS), which provides the data protection for Azure Information Protection.

For these applications and solutions, Rights Management support is tightly integrated by using the Rights Management APIs to support usage restrictions. These applications and solutions are also known as "RMS-enlightened".

Unless stated otherwise, the supported capabilities apply to both Azure RMS and AD RMS. In addition, AD RMS support on iOS, Android, macOS, and Windows Phone 8.1 requires Active Directory Rights Management Services Mobile Device Extension.

RMS-enlightened applications

The following table displays RMS-enlightened client applications from Microsoft and software vendors.

Information about the table columns:

  • Protected PDF: Files that have a .ppdf file name extension and that are automatically created when you use the RMS sharing application to share Office files and PDF files by email. The RMS sharing application, the Azure Information Protection app for iOS and Android, and the Azure Information Protection client for Windows include a reader for protected PDF files. Previously, if you created PDF files that you protected by using Azure RMS or AD RMS, you can continue to read these files on Windows, iOS, and Android devices by using Foxit Reader and Nitro Pro.

  • Email: The email clients listed can protect the email message itself, which will automatically protect any attached files. In this scenario, the client’s preview feature can display the protected content (message and attachment) to authorized recipients. However, if an email message itself is not protected but the attachment is protected, the client’s preview feature cannot display the protected attachment to authorized recipients.

  • Other file types: Text and image files include files that have a file name extension such as .txt, .xml, .jpg, .and jpeg. These files change their file name extension after they are natively protected by Rights Management, and become read-only. Files that cannot be natively protected have a .pfile file name extension after they are generically protected by Rights Management. For more information, see the File types supported from the Azure Information Protection client admin guide.

Device operating system Word, Excel, PowerPoint Protected PDF Email Other file types
Windows Office 2010

Office 2013

Office 2016

Office Mobile apps (Azure RMS only) [1]

Office Online [2]
Azure Information Protection client for Windows

Gaaiho Doc

GigaTrust Desktop PDF Client for Adobe

Foxit Reader

Nitro PDF Reader

RMS sharing app
Outlook 2010

Outlook 2013

Office 2016

Outlook Web App (OWA) [3]

Windows Mail [4]
Azure Information Protection client for Windows: Text, images, pfile

RMS sharing application for Windows: Text, images, pfile

SealPath RMS plugin for AutoCAD [8]: .dwg
iOS Office for iPad and iPhone [5]

Office Online [2]

TITUS Docs
Azure Information Protection app [1]

Foxit Reader

TITUS Docs
Azure Information Protection app [1]

Citrix WorxMail [6]

NitroDesk [4]

Outlook for iPad and iPhone [4]

OWA for iOS [3]

TITUS Mail
Azure Information Protection app [1]: Text, images

TITUS Docs: Pfile
Android GigaTrust App for Android

Office Online [2]

Office Mobile [1]
Azure Information Protection app [1]

GigaTrust App for Android

Foxit Reader

RMS sharing app [1]
9Folders [4]

Azure Information Protection app [1]

GigaTrust App for Android [4]

Citrix WorxMail [6]

NitroDesk [4]

Outlook for Android [4]

OWA for Android [3] and [7]

Samsung Email (S3 and later) [7]

TITUS Classification for Mobile
Azure Information Protection app [1]: Text, images
macOS Office 2011 (AD RMS only)

Office 2016 for Mac

Office Online [2]
Foxit Reader

RMS sharing app [1]
Outlook 2011 (AD RMS only)

Outlook 2016 for Mac

Outlook for Mac
RMS sharing app [1]: Text, images, pfile
Windows 10 Mobile Office Mobile apps (Azure RMS only) [1] Not supported Citrix WorxMail [6]

Outlook Mail
Not supported
Windows RT Office 2013 RT

Office Online [2]
Not supported Outlook 2013 RT

Mail app for Windows

Windows Mail [4]
Siemens JT2Go: JT files
Windows Phone 8.1 Office Mobile (AD RMS only) RMS sharing app [1] Outlook Mobile [4] RMS sharing app [1]: Text, images, pfile
Blackberry 10 Not supported Not supported Blackberry email [4] Not supported
Footnote 1

Supports viewing protected content.

Footnote 2

Supports viewing protected documents when an unprotected document is uploaded to a protected library in SharePoint Online and OneDrive for Business.

Footnote 3

If a recipient receives a protected email and is not using Exchange as the mail server or if the sender belongs to another organization, this content can be opened only in a rich email client, such as Outlook. This content cannot be opened from Outlook Web Access.

Footnote 4

Uses Exchange ActiveSync IRM, which must be enabled by the Exchange administrator. Users can view, reply, and reply all for protected email messages but users cannot protect new email messages themselves.

If a recipient receives a protected email and is not using Exchange as the mail server or if the sender belongs to another organization, this content can be opened only in a rich email client, such as Outlook. This content cannot be opened from Outlook Web Access or from mobile mail clients using Exchange Active Sync IRM.

Footnote 5

Supports viewing and editing protected documents for iOS; supports viewing protected documents for Android. For more information, see the following post on the Office blog: Azure Rights Management support comes to Office for iPad and iPhone

Footnote 6

For more information, see the Citrix product documentation for WorxMail.

Footnote 7

For more information, see the following post on the Office blog: OWA for Android now available on select devices

Footnote 8

For more information, see the following post on the Enterprise and Mobility Blog: SealPath brings RMS protection to AutoCAD

More information about Azure RMS support for Office

Azure RMS is tightly integrated into the Word, Excel, PowerPoint, and Outlook apps, where this functionality is often referred to as Information Rights Management (IRM). The following Office client editions support protecting files and emails by using Azure RMS:

  • Office 365 ProPlus: Office 2016 and Office 2013

  • Office Professional Plus 2016

  • Office Professional Plus 2013

  • Office Professional Plus 2010

All editions of Office (with the exception of Office 2007) support consuming protected content.

Azure RMS with Office Professional Plus 2010 or Office Professional 2010:

  • Requires the Azure Information Protection client for Windows or the Rights Management sharing application for Windows

  • Not supported on Windows 10

  • Does not support forms-based authentication for federated user accounts. These accounts must use Windows Integrated Authentication.

More information about the Azure Information Protection app for iOS and Android

The Azure Information Protection app for iOS and Android replaces the RMS sharing app for these devices. It provides the same functionality and in addition, supports rights-protected email messages and rights-protected PDF files on SharePoint Online.

If your iOS and Android devices are enrolled by Microsoft Intune, you can deploy and manage this app by using a policy managed app. For more information, see Configure and deploy mobile application management policies in the Microsoft Intune console from the Intune documentation. For Step 2 from this Intune documentation, use the instructions to publish a policy managed app.

For more information, see the FAQ for Microsoft Azure Information Protection app for iOS and Android.

More information about the Azure Information Protection client for Windows

This client now replaces the Rights Management sharing application for Windows.

For more information, see the following resources:

Download the relevant app by using the links on the Microsoft Azure Information Protection page.

More information about the Rights Management sharing application

This application is being replaced by the Azure Information Protection client. It is still required for Mac computers and Windows Phone mobile devices.

For more information, see the following resources:

Download the app for Mac computers and for Windows Phone using the links on the Microsoft Azure Information Protection page.

More information about other applications that support Azure Information Protection

In addition to the applications in the table, any application that supports the APIs for the Azure Rights Management service can be integrated with Azure Information Protection, which includes:

  • Line-of-business applications that are written in-house by using the RMS SDKs

  • Applications from software vendors that are written by using the RMS SDKs.

For more information, see the Azure Information Protection Developer's Guide.

Applications that are not supported by Azure RMS

The following applications that are not currently supported by Azure RMS include the following:

  • Microsoft Office for Mac 2011

  • Microsoft OneDrive for Business for SharePoint Server 2013

  • XPS Viewer

In addition, the RMS sharing application and the Azure Information Protection client has the following restrictions:

  • For Windows computers: Requires a minimum version of Windows 7 Service Pack 1

RMS-enlightened solutions

The following table displays RMS-enlightened solutions from software vendors.

If you are a software vendor and have a solution for this table that is not listed, register your application with Azure AD. For more information, see How to register and RMS enable your app with Azure AD.

Product Vendor Description
Absolute Absolute Data loss prevention (DLP) to protect content.
Content Locker VMware Stores, consumes, and creates protected content.
Controle TakeControle eDiscovery by using labeling and protection.
Halocore Secude Protects files that are exported from SAP environments.
MaaS 360 IBM Integration to consume and protect documents.
Mobiliya Mobiliya Secures documents from EMC’s Documentum repositories.
Ramessys Ramessys Integration for Chemcart and Documentum.
Sealpath Sealpath Technologies Integration with CAD design tools, such as AutoCAD and Siemens Jt2GO.
SecRMM Sqaudra Technologies Document protection for removable media.
Security Sheriff CryptZone Access management on SharePoint and protects documents, based on their classification and access permissions.
Symantec DLP Symantec Detection and monitoring for protected files.

Next steps

To check for other requirements, see Requirements for Azure Information Protection.

For more information about how the most commonly used applications support Azure RMS, see How applications support the Azure Rights Management service.

For information about how to configure the most commonly used applications for Azure RMS, see Configuring applications for Azure Rights Management.

Comments

Before commenting, we ask that you review our House rules.