Use Microsoft Information Protection (MIP) with Bluebeam Revu

Applies to:

  • Revu 21

Overview

With the Revu 21.0.30 update, Bluebeam now supports files secured via Microsoft Information Protection (MIP). Also known as Microsoft Purview, MIP is an integrated document security system compatible with Microsoft 365 environments. With MIP, company data remains protected internally and externally, including but not limited to the following locations:

  • Microsoft 365 apps (e.g., Word, PowerPoint, Excel, Outlook)
  • Services (e.g., Microsoft Teams, SharePoint, Exchange, Power BI)
  • On-premises locations (e.g., SharePoint Server, on-premises files shares)
  • Third-party apps and services (e.g., Box and Dropbox)
  • Devices

MIP uses sensitivity labels to apply different levels of security to documents, and these sensitivity labels are managed through the Microsoft Purview compliance portal. When applying MIP sensitivity labels, your organization gains access to the benefits listed below.

  • Scope: Determine what kind of content is protected (i.e., files, emails, groups).
  • Encryption: Decide whether or not to encrypt protected content.
  • Content markings: Add informational headers, footers, watermarks, timestamps, etc.
  • Sharing: Choose who can see the content outside the organization.
  • Auto-labeling: Enforce sensitivity labeling for new content.
Once an MIP sensitivity label has been applied to company data, the label is stored in the metadata of that item. Similar to Digital Rights Management (DRM), a sensitivy label will roam with an item but won’t alter its content, leaving file-based protection intact.

To learn more and see MIP in action, click here.

MIP + Revu

After downloading and installing Revu 21.0.30, you can open MIP-secured files in Revu and Studio. Because these documents are secured, many tools and menu items will appear grayed out, providing a read-only experience for PDFs.

To successfully open an MIP-secured PDF, Revu must be configured to access sensitivity label information from your Microsoft Purview setup.

If you have SSO enabled for your account, you must create separate client applications for SSO and MIP to enable access to MIP-secured PDFs. With the SSO client application already set up, contact Bluebeam Technical Support for assistance with creating an MIP client application.

MIP Access + Permission

If MIP is configured in your Revu preferences, you’ll be prompted to sign in with your Entra ID tenant credentials upon opening an MIP-secured document in Revu.

MIP Login Step 1

MIP Log In Step 2

MIP Configured + No Azure Directory Account

When MIP is configured in your Revu preferences, but your account isn’t included in the tenant Azure Directory, Microsoft won’t authenticate your account. After opening an MIP-secured PDF in Revu and entering your login credentials, you’ll encounter the following message:

MIP log in failure

If the error persists, contact your IT department to add your account to the Microsoft Azure Directory.

No MIP Access

If MIP isn’t configured in your Revu preferences, you’ll encounter an error message and won’t be able to open an MIP-secured PDF in Revu. Additionally, you may receive this error if you don’t have permissions to view the file or your Entra ID credentials are incorrect. To troubleshoot, please contact your IT services team or jump to Create MIP Registry Key.

MIP error message

Create MIP Registry Key

Once you update to Revu 21.0.30, a new MIP Config tab becomes available in Revu > Preferences.MIP Config Tab SuccessThe App Name and IDs shown in the MIP Config tab are read by the Windows Registry under HKEY_LOCAL_MACHINE. When these fields are blank, this means MIP hasn’t been fully configured with Revu yet.

Please contact your IT department to set up MIP on your Windows system. If you’re an IT professional, first register the application in the Microsoft Azure portal. For more information with steps, click here. Then, create an MIP registry key for the end user. Make sure Revu is closed before following the steps below.
  1. In Windows, open the Registry Editor.
  2. Navigate to the following path: 
    Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Bluebeam Software\21\
  3. Right-click the 21 folder and select New > Key.
  4. Rename the new key MIP.
  5. Add the following values to the MIP key:
    1. AppName: The user’s MIP AppName value. The App ID should match the App/Client ID in Microsoft Entra ID (formerly Azure Active Directory).
    2. ClientID: A GUID that should be provided by an IT professional.
    3. TenantID: Another GUID that should be provided by an IT professional.

    MIP registry key example

  6. Reopen Revu. The MIP Config tab in Revu > Preferences should display the settings needed to open an MIP-protected PDF.
For IT admins that need to populate MIP Config keys for multiple users, we recommend creating a script. If needed, contact Technical Support for a Powershell script that will accomplish this.

IT Resources

Want to learn more about deploying MIP for your organization’s Revu users? Check out the additional resources below.

Revu 21

Installation

How-To

Overview
MIP + Revu
Create MIP Registry Key
IT Resources