Integrate

Prisma Access Browser

with Microsoft Information Protection

Find your tenant ID.
Sign in to the Azure portal.
Make sure you're signed in to the correct tenant. If you're not in the correct tenant, switch directories .
Under Azure services, select
Microsoft Entra ID
. If you don't see Microsoft Entra ID, use the search function to find it.
Locate the
Tenant ID
in the
Overview
page.
Obtain your client ID.
Sign in to the Azure portal.
Make sure you're signed in to the correct tenant. If you're not in the correct tenant, switch directories .
Under Azure services, select
Microsoft Entra ID
. If you don't see Microsoft Entra ID, use the search function to find it.
Under
Manage
, select
App registrations
New registration
.
Enter a display
Name
for your application. Your users will see the display name when they interact with the app.
You can change the display name at any time or use it for multiple app registrations. It doesn't affect the automatically generated Application (client) ID, which uniquely identifies your app.
Specify which users can use the application.
For
Redirect URI
, select
Single Page Application
(SPA) and provide the following URI: https://pbeicpigliokiipcohleidnclgdjnbai.chromiumapp.org/.
Click
Register
.
When registration finishes, you can find the
Application (client) ID
in the app registration's Overview page.
Configure the required permissions for the app.
After the registration, under
Manage
, select
Authentication
. Under
Implicit grant
, select both
Access tokens
and
ID tokens
.
Under
API permissions
, select
Add a permission
. Select
APIs my organization uses
, and search for Microsoft Information Protection Sync Service. Select
Delegated permissions
and add the
UnifiedPolicy.User.Read permission
.
Under
API permissions
, select
Add a permission
. Select
Microsoft APIs
, and select
Microsoft Graph
. Choose
Delegated permissions
and add the email and openid permissions.
Under
API permissions
, select
Grant admin consent for <Organization Name>
.
Under
Token configuration
, select
Add optional claim
. Select
ID
, and
add email
.
Enable the integration in
Strata Cloud Manager
.
Go to
Manage
Configuration
Prisma Access Browser
Administration
Integrations
Services
.
Scroll to
Microsoft Information Protection Integration
and expand it.
Click
Enabled
, then enter the
Tenant ID
and
Client ID
.
Click
Save
.