Microsoft Information Protection (MIP) Labels

Last published : Apr 17, 2026
Microsoft Information Protection (MIP) is a built in, intelligent, unified, and extensible solution designed to protect sensitive data. These are also referred to as Sensitive Labels. MIP technology integration allows adding labels to the documents. The labels might have a policy that restricts access to sensitive documents.
Configuring policies
After creating new tags, you need to associate those tags with a policy. To create new policy click New at the bottom of the Policies page. A new window appears.
image
  • Add name of your choice
  • Status should be Enabled.
  • Add description (optional field).
  • Specify the risk weight for this policy.
  • Select the tags that you have created.
  • Select custom string field from the Conditions drop-down. You can add multiple conditions as per your requirement.
  • MIP labels are custom attributes of a file so you will have to provide information in specific format in the Text Box present in the Policy Manager. Each MIP Label name is associated to a specific GUID which must be included a policy condition.
    • For Office files with INTERNAL label, add the following condition:
      custom:MSIP_Label_b43db875-2771-47af-9fc1-26bfde1b65ba_Name "contains Text" INTERNAL
      Note: You need to addcustom:before the label name and include GUID present in the label.
      • For PDF file with INTERNAL label, add the following condition:
      pdf:docinfo:custom:MSIP_Label_b43db875-2771-47af-9fc1-26bfde1b65ba_Name
      "contains Text" INTERNAL
Note: You need to addpdf:docinfo:custombefore the label name and include GUID present in the label.
File Types Sample Format Condition Value
Office Files custom:MSIP_Label__Name Contains Text INTERNAL
PDF Files pdf:docinfo:custom:MSIP_Label__Name Contains Text INTERNAL