RMS for individuals and Azure Information Protection

RMS for individuals is a free self-service subscription for users who need to open files that have been protected by Azure Information Protection. If these users cannot be authenticated by Microsoft Entra ID, this free sign-up service can create an account in Microsoft Entra ID for a user. As a result, these users can now authenticate by using their company email address and then read the protected files on computers or mobile devices.

RMS for individuals uses Microsoft Entra self-service signup. If users have created accounts for your organization by using this subscription, as an administrator for your organization, you can claim ownership and take control of their accounts.

To sign up for this free account, users go to the Microsoft Azure Information Protection page, and provide their work email address. They receive an email in response from Microsoft, and they can then complete the sign-up process by entering details to create their account.

When the account is created, the final page displays links to download the Azure Information Protection client or viewer for different devices, a link to the user guide, and a link for a current list of applications that natively support Rights Management protection.

Alternatives: Use Office 365 Message Encryption or Microsoft accounts

RMS for individuals is one option to help ensure that authorized people outside your organization can always read files that your organization protects.

Alternative options include:

• Email documents by using Office 365 Message Encryption with new capabilities. This email solution works for all email addresses on all devices and is the recommended way to safely share information and view Office documents in a browser with people outside your organization.

• Use Microsoft accounts. Not all applications can open protected content when a Microsoft account is used for authentication. More information

To sign up for RMS for individuals

1. Using a Windows or Mac computer, or a mobile device, go to the Microsoft Azure Information Protection page.

2. Type the email address that was used to protect the document you need to open.

3. Click Sign up.

   Microsoft uses your email address to check whether your organization already has a subscription for Azure Information Protection Premium or an Office 365 subscription that includes data protection by using Azure Information Protection. If either of these subscriptions are found, you don’t need RMS for individuals. You are signed in immediately and the self-service sign up for RMS for individuals is canceled. If one of these subscriptions isn't found, you continue to the next step.

4. Wait for a confirmation email message to be sent to the address that you supplied. It will be from the Microsoft 365 Team ([email protected]) and has the subject Finish signing up for Microsoft Azure Information Protection.

5. When you receive the email, click Yes, that's me to verify your email address and complete the sign-up process.

6. You now see a One last thing ... page for you to supply details for your account. Type in your first name, your last name, enter and confirm a password of your choice, and then click Start.

7. When your account is created, you see a new Microsoft Azure Information Protection page where you can download and install the Azure Information Protection client, or click the User guide link for how-to instructions for Windows computers.

Now your account is created, if you're prompted to sign in to read protected files, enter the same email address and password that you used to create the account for RMS for the individuals.

Next steps

RMS for individuals is an example of using the self-service signup feature that is supported by Microsoft Entra ID. For more information about how this feature works, see What is Self-Service Signup for Microsoft Entra ID? in the Microsoft Entra documentation.