MIP Step 2: Profile 2 (Enabling MIP on the Azure portal for detection servers ( Enabling Detection Servers to decrypt MIP encrypted files ))

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

Enabling MIP on the Azure portal for detection servers

Resolution

1. 1. Log in to http://portal.azure.com/ with administrator privileges.
   2. Go to Azure Active Directory > App Registrations >  New Registration
   3. Under Supported account types choose the Single tenant account type option.                                                             
   4. Provide a display name.
   5. Leave the Redirect URI field empty
   6. Click Register.
   7. Select API Permissions and Select “Add a Permission”
   8. Select Azure Rights Management Services from the Microsoft APIs tab.                           
   9. Choose Application Permissions scope.                   
   10. Select the Content.SuperUser permission, then click Add a permission.                                                 
   11. Click Grant Admin Consent and then click Yes.                               
   12. Go to Certificates & secrets.                                 
   13. Click New Client secret under Client secrets.
   14. Add a description.
   15. Choose a validity period and click Add.                                                                                                                                      
   16. Copy the Client secret. Copy this immediately; it will not be visible later. You will use this client secret in Configuring detection servers with Azure access credentials.                          
   17. Go to the Overview page and copy the Application (client) ID and Directory (tenant) ID.                                                                                                                                                  
   18. In the navigation pane, select Overview, and copy the Application (client) ID and Directory (tenant) ID values. You use these details later to configure MIP credential profiles that Symantec Data Loss Prevention uses to authenticate with the MIP service.                                                                                                                                                   

Additional Information

Return to Getting started with a DLP / MIP Integration