Edit

Mobile viewer apps for Azure Information Protection on iOS and Android

  • Article
  • 5 minutes to read

Note

Are you looking for Microsoft Purview Information Protection, formerly Microsoft Information Protection (MIP)?

The Azure Information Protection unified labeling client is now in maintenance mode. We recommend you use labels that are built in to your Office 365 apps and services. Learn more

The Azure Information Protection (AIP) mobile apps enable you to view protected emails, PDFs, images, and text files that cannot be opened with your regular apps for these file types. For example, if protected emails show in your regular email mobile app as attachments, you may want to use the AIP mobile app to view that email.

The AIP mobile apps are viewers only, and do not enable you to create new emails or reply to emails, or create or edit protected files. The AIP mobile apps also cannot open attachments to protected PDFs or emails.

  • If you have mobile Office apps installed on your mobile device, we recommend that you use the Office apps to view protected files.
  • If you are opening your file on a desktop, use the desktop version of the AIP Viewer.
  • The AIP mobile apps support only protected files. Unprotected files are not supported and cannot be consumed in the mobile viewer apps.
  • Intune's Open-In / Share filtering features are not currently supported.

What's new for the AIP mobile viewer app

April 25, 2021: Version 2.1 of the AIP Viewer mobile app includes fixes for instances where the app would close unexpectedly or display a black screen.

AIP mobile viewer app requirements

The AIP mobile viewer apps for iOS and Android support the following file types and environments:

Requirement Description
Supported OS versions Minimum mobile OSs include:
- iOS 11
- Android 8.1

Note: The AIP mobile viewer apps are not supported on Intel CPUs.
Supported mobile ABIs Supported Application Binary Interfaces (ABIS) include:
- armeabi-v7a
- arm64-v8a
- x86_64
Supported sign in credentials Sign in to the AIP mobile viewer apps with one of the following:

Work or school credentials. Try logging in with your work or school credentials. If you have questions, contact your administrator to understand whether your organization has AD RMS on-premises with the mobile device extension, or uses Azure Information Protection.

A Microsoft account. If your personal email address was used to protect the file, sign in with a Microsoft account. If you need to apply for a Microsoft account, you can use your own Hotmail, Gmail, or any other email address to do so.

Note: Not all applications are able to open content protected with a Microsoft account. For more information, see Supported scenarios for opening protected documents.
Supported file types Supported files types include protected email messages, PDF files, images, and text files.

For example, these files include the following extensions: rpmsg, .pdf, .ppdf, .pjpg, .pjpeg, .ptiff, .ppng, .ptxt, .pxml

For more information, see above and The AIP client admin guide.

Note

The AIP mobile viewer apps send system metadata and pseudonymized end-user data to Microsoft, such as device ID, manufacturer, OS, and OS version and build number.

Data is sent each time the AIP mobile viewer apps are launched and each time they are used to decrypt and consume protected documents on the device.

Download and install the AIP app for your device

If you do not have Office apps that you can use to open your protected files, download and install AIP mobile viewer apps.

Download and install the mobile viewer apps from the following locations:

Location Details / Link
iTunes Install from iTunes.
Google Play Install from Google Play.
Your company portal If your mobile device is managed by Microsoft Intune, you may be able to download the AIP mobile viewer apps from your company portal.

For more information, contact your system administrator.

iOS: View protected files on your device

Once you've installed the AIP mobile app, open a protected email or file.

  1. If you are prompted to select an app to open the file, tap the share button to share the file instead.

    Select Share file via.... and then select Copy to AIP Viewer.

    For example:

    Share to AIP Viewer in iOS

  2. Sign in, or select a certificate as prompted.

    Once you've been authenticated, the your email or file will open in the AIP Viewer.

Android: View protected files on your device

Once you've installed the AIP mobile app, open a protected email or file.

  1. When prompted to select an app, select the AIP Viewer:

    Select the AIP Viewer mobile app

  2. Sign in, or select a certificate as prompted.

    Once you've been authenticated, the your email or file will open in the AIP Viewer.

Admins: Testing the AIP mobile viewer apps

If you're a system administrator who wants to test the AIP mobile viewer apps for your org, or simply want to try it out for yourself, use the instructions below to walk you through the entire process.

  1. Make sure that you have access to a file type supported by the AIP mobile app from your device.

    For example, send yourself one of the following rights-protected files:

    File type Instructions
    Email (.rpmsg) Use another device, such as Outlook from a Windows computer, to send yourself a rights-protected email message that you can access from your mobile device.
    PDF 1. From a Windows computer, protect a PDF file using the AIP client.
    2. Send yourself the protected PDF, or upload it to a SharePoint protected library and share it to your own email address.
    Image (.ptxt, .pjpg, or .ppng) 1. From a Windows computer, protect a text or image file using the AIP client.

    2. Send yourself the protected file, or upload it to a SharePoint protected library and share it to your own email address.

  2. Open the protected file on your mobile device using the email attachment or link that you'd sent to yourself.

    For example, protected emails show in your regular email mobile app as attachments.

  3. When prompted to select an app to open the protected email or file, select the AIP Viewer app.

  4. Sign in or select a certificate, as prompted.

    Once authenticated, the AIP Viewer app displays the email or file for you.

Note

Always open the AIP app by opening protected content. Do not try to sign in to the app until you're prompted, or open a protected file from inside the AIP Viewer app.

Next steps

Use one of the following methods to provide feedback about the AIP mobile viewer apps:

  • Go to Settings > Send feedback
  • Post your question on our Yammer site

For more information about the protection features supported in your apps, see Applications that support Azure Rights Management data protection.