From bolt-on to built-in – Migrate from Azure Information Protection Add-in⚓︎
Office apps have supported sensitivity labels since September 2018, starting in Office for PC, using Azure Information Protection (AIP) Add-in. In October 2019, Office apps started providing the same functionality built into Word, Excel, PowerPoint, and Outlook and expanded sensitivity labels across Mac, Web, and Mobile for comprehensive, consistent, and seamless experience for end-users and admins.
Built-In Instead of Bolt-On⚓︎
Built-in labeling forms the cornerstone of a Microsoft Purview information protection deployment it extends across platforms (Windows, macOS, iOS, Android, and web), as well as across Microsoft apps and services, and beyond. Built-in labeling is also designed to work with other Microsoft Purview capabilities, such as data classification and Microsoft Purview data loss prevention (DLP).
Customers benefited from the choice between the AIP add-in or the built-in native labeling depending on the features they needed, but this also created challenges and tradeoffs for organizations:
|Add-In Limitations||Degrades end-user productivity and satisfaction||Higher cost for IT|
|🔓 Add-in can be disabled by end-users, leaving your data potentially vulnerable.
🛑 Add-in features are “frozen in time” since December 2021 at the start of its maintenance period.
|🐢 Like most add-ins, AIP regularly impacts end-user productivity because of performance implications with the add-in.
📱 Users of Office on other platforms face inconsistencies with sensitivity labeling since the Add-in only supports Office for PC.
|⚙️ AIP Add-in requires separate configuration, deployment, and management from the rest of the admin experience.|
Read the blog “From bolt-on to built-in information protection in Microsoft 365 Apps” for an overview about this change.
⚠️ Warning: Up until recently, built-in labeling was turned off by default in Office for Windows apps when the AIP client was installed. This default will no longer be the case for newer versions of Office. Soon, the built-in labeling will become the default. Learn more about the change of default labeling client and how to configure your preferred labeling client.
💡 Tip: You can continue using all other tools in the AIP client, such as the Scanner, PowerShell extensions, or Windows right-click extension Classify & Protect. These tools are not affected by disabling the add-in inside Office and continue to be the recommended tools for all your sensitivity labeling scenarios that aren’t available within the Office apps.
For customers currently using the AIP Add-in for Office, use the playbooks below to help you plan and execute the transition to built-in labeling in Office apps. It provides a centralized resource to guide you through the prerequisites, configuration, and deployment of the built-in sensitivity labels in Office.
|Self-Evaluation||Migration Playbook||Comparison Guide||Preview Program|
|Try an interactive questionnaire that tailors the migration guide to your organization's needs.
|Review a simple 5-step guide to help you learn, evaluate, and execute replacement of the AIP Add-in.
|Comprehensive roadmap and change-management guidelines each capability in the AIP add-in relative to its replacement in built-in labeling.
|Itching to get started? Check out our preview programs to evaluate information protection with built-in labeling.
Try it now
We recommend you join the Microsoft Purview Customer Community Program (CCP) for access to demos from the product teams, webinars from experts, and private previews that give you early access to all sensitivity labeling features that are coming soon to built-in labeling in Office.
If you need additional assistance to evaluate how to migrate users using the AIP Add-in after reviewing the migration guide, reach out to AIP2MIPGetHelp. We will do our best to respond to inquiries and direct you to the appropriate support resources for your organization.