Integrate Prisma Access Browser with Microsoft Information Protection

1. Find your tenant ID.

   1. Sign in to the Azure portal.
   2. Make sure you're signed in to the correct tenant. If you're not in the correct tenant, switch directories .
   3. Under Azure services, select Microsoft Entra ID. If you don't see Microsoft Entra ID, use the search function to find it.
   4. Locate the Tenant ID in the Overview page.
2. Obtain your client ID.

   1. Sign in to the Azure portal.
   2. Make sure you're signed in to the correct tenant. If you're not in the correct tenant, switch directories .
   3. Under Azure services, select Microsoft Entra ID. If you don't see Microsoft Entra ID, use the search function to find it.
   4. Under Manage, select App registrationsNew registration.
   5. Enter a display Name for your application. Your users will see the display name when they interact with the app.

      You can change the display name at any time or use it for multiple app registrations. It doesn't affect the automatically generated Application (client) ID, which uniquely identifies your app.
   6. Specify which users can use the application.
   7. For Redirect URI, select Single Page Application (SPA) and provide the following URI: https://pbeicpigliokiipcohleidnclgdjnbai.chromiumapp.org/.
   8. Click Register.

      When registration finishes, you can find the Application (client) ID in the app registration's Overview page.
3. Configure the required permissions for the app.

   1. After the registration, under Manage, select Authentication. Under Implicit grant, select both Access tokens and ID tokens.
   2. Under API permissions, select Add a permission. Select APIs my organization uses, and search for Microsoft Information Protection Sync Service. Select Delegated permissions and add the UnifiedPolicy.User.Read permission.
   3. Under API permissions, select Add a permission. Select Microsoft APIs, and select Microsoft Graph. Choose Delegated permissions and add the email and openid permissions.
   4. Under API permissions, select Grant admin consent for <Organization Name>.
   5. Under Token configuration, select Add optional claim. Select ID, and add email.
4. Enable the integration in Strata Cloud Manager.

   1. Go to ManageConfigurationPrisma Access BrowserAdministrationIntegrationsServices.
   2. Scroll to Microsoft Information Protection Integration and expand it.
   3. Click Enabled, then enter the Tenant ID and Client ID.
   4. Click Save.