Active Directory Rights Management Services Mobile Device Extension (MDE)

Products

• Information Centric Security

Issue/Introduction

Using AD RMS MDE (https://technet.microsoft.com/en-us/library/dn673574.aspx), the RMS infrastructure will behave like Azure RMS (cloud), for Mobile devices, and we can successfully configure RightsWATCH to use it.

Resolution

With  MDE deployed in your infrastructure and effectively tested with RMS Sharing  you will be able to use RightsWATCH mobile apps, to do it, do the following:  

Note: If using the AD RMS MDE you don’t need to install the RightsWATCH Mobile Service.

1. On the AD FS server(s), open a Power Shell as an admin and type the following to allow

1.1. Add-AdfsClient -Name RightsWATCH-for-android –ClientId com.watchfulsoftware.android.rightswatch –RedirectUricom.watchfulsoftware.android.rightswatch://authorize
1.2. Add-AdfsClient -Name RightsWATCH-for-ios -ClientId com.watchfulsoftware.rightswatch -RedirectUri com.watchfulsoftware.rightswatch://authorize
 

Alternatively, you can run the configure-MDE-for-RightsWATCH-mobile-apps.ps1 provided with the installation bundle.