Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
560 questions
Decrypting an RPMSG Message file
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 84%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGN%3C/text%3E%3C/svg%3E)
Graf, Nico
0
Reputation points
Hello, i have implemented the example to access an rpmsg-Message file (https://github.com/Azure-Samples/MipSDK-File-Dotnet-ServicePrincipalAuth). I have configured my MS Entra correctly, registeresd an app with application delegation access as it was described in the readme. But when i call "CreateFileHandlerAsync" i got an AccessDeniedException: The service didn't accept the auth token. Challenge:['Bearer resource="https://aadrm.com" ..... What can I do? What can be wrong configured? I have also booked an additional service (Enterprise Mobility + Security E3) to my Microsoft 365 Business Basic. Or must i have an other License? Regards Nico
Azure Information Protection
Microsoft 365 and Office | Install, redeem, activate | For business | Windows
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
Givary-MSFT 35,621 Reputation points Microsoft Employee Moderator2024-03-01T04:34:50.5266667+00:00 @Graf, Nico Thank you for reaching out to us,
Have you registered your client app in Entra ID as below ?:
What is the scope you are using? use https://aadrm.com/.default as scope instead of https://aadrm.com
-
Graf, Nico 0 Reputation points
2024-03-01T21:45:24.36+00:00 Hello @Givary-MSFT ,
thank you for response.
Yes, i have registered the client app correctly. Now i have found someting. I can decrypt rpmsg-Messages with the MIP-SDK when the mail is an internal mail. When i get an external protected mail (from another office365 tenant) i can't decrypt and get the error message described in my first post. Is it generally not possible? Oulook can display this external proteced message so i think it should work somehow.
Regards
Nico
Sign in to comment
Sign in to answer