Microsoft Information Protection (MIP) Labels

Last published : Jul 23, 2026
Microsoft Information Protection (MIP) is a built-in, intelligent, unified, and extensible solution designed to protect sensitive data. These are also referred to as Sensitive Labels. MIP technology integration allows adding labels to the documents. The labels might have a policy that restricts access to sensitive documents.
Configuring policies
After creating new tags, you need to associate those tags with a policy. To create a new policy, click Create Policy. A new window appears.
  • Add name of your choice
  • Status should be Enabled.
  • Add description (optional field).
  • Specify the risk weight for this policy.
  • Select the tags that you have created.
  • Select custom string field from the Conditions drop-down. You can add multiple conditions as per your requirement.
  • MIP labels are custom attributes of a file so you will have to provide information in a specific format in the Text Box present in the Policy Manager. Each MIP Label name is associated with a specific GUID, which must be included in a policy condition.
    • For Office files with INTERNAL label, add the following condition:
      custom:MSIP_Label_b43db875-2771-47af-9fc1-26bfde1b65ba_Name "contains Text" INTERNAL
      Note: You need to add custom: before the label name and include the GUID present in the label.
    • For PDF file with INTERNAL label, add the following condition:
      pdf:docinfo:custom:MSIP_Label_b43db875-2771-47af-9fc1-26bfde1b65ba_Name
      "contains Text" INTERNAL
      Note: You need to add pdf:docinfo:custom before the label name and include the GUID present in the label.
    File Types Sample Format Condition Value
    Office Files custom:MSIP_Label__Name Contains Text INTERNAL
    PDF Files pdf:docinfo:custom:MSIP_Label__Name Contains Text INTERNAL