Fix MIP Plug-In Certificate Authentication Prompt Missing in Adobe Acrobat
Question details
Users authenticated via ADFS certificates do not receive the necessary certificate prompt when attempting to open Microsoft Azure Information Protection PDFs in Adobe Acrobat Reader.
- Product
- Adobe Acrobat Reader, Microsoft Information Protection (MIP) Plug-in
- Device & OS
- not provided
- Scenario
- Opening MIP-protected PDFs requiring ADFS certificate authentication.
- Observed behavior
- The certificate authentication prompt from the MIP plug-in fails to appear, whereas password-authenticated users can access the files normally.
Ensure you have administrative privileges on your computer and verify that your smart card or ADFS certificate is properly inserted or installed before proceeding with troubleshooting.
Verify Software Versions and Certificate Trust Settings
Ensure your Adobe Acrobat Reader and MIP plug-in are updated to versions that fully support ADFS certificate authentication, and verify that your system trusts the certificates.
Certificate-based authentication via ADFS requires seamless communication between Adobe Acrobat, the MIP plug-in, and your operating system's certificate store. Outdated software or missing trust chains often block the prompt.
Open Adobe Acrobat Reader, go to 'Help' > 'Check for Updates' to ensure you are on the latest version. Additionally, download and install the latest Microsoft Purview Information Protection plug-in for Acrobat from Adobe's or Microsoft's official download page.
Press Windows + R, type 'certmgr.msc', and press Enter. Navigate to 'Personal' > 'Certificates' to ensure your ADFS certificate is present, valid, and has not expired.
Open a similarly protected Microsoft Word or Excel document using the same ADFS account. If the prompt appears in Office but not Acrobat, the issue is isolated to the Acrobat MIP integration.
In Adobe Acrobat, navigate to 'Edit' > 'Preferences' > 'Signatures'. Under 'Identities & Trusted Certificates', click 'More' to confirm your ADFS digital ID is recognized by the application.
Review MIP Logs and Contact Support
If software versions and trust settings are correct but the prompt is still missing, reviewing the plug-in logs can help identify specific token drops or middleware failures.
Try WPS Office for Seamless PDF and Document Management
If you are struggling with complex Adobe and Microsoft plug-in configurations, WPS Office offers a lightweight, all-in-one suite with a built-in PDF reader and editor that provides excellent compatibility with Microsoft Office formats.
- 1. Download WPS Office: Visit the official WPS website and download the free WPS Office installer.
- 2. Install and Set as Default: Run the installer and optionally set WPS Office as your default PDF viewer and document editor.
- 3. Open Your Documents: Launch WPS Office to seamlessly view, edit, and manage your PDFs and Office documents in one unified application.
Frequently Asked Questions
Why does password authentication work for MIP PDFs but not certificate authentication?
Password authentication is generally simpler and natively handled by the network, whereas ADFS certificate authentication requires specific middleware, correct trust chain configurations, and full compatibility between the MIP plug-in and Acrobat Reader.
Where can I download the latest Microsoft Information Protection plug-in for Acrobat?
You can download the latest MIP plug-in directly from Adobe's official website or via the Microsoft Purview Information Protection download pages. Ensure you select the version corresponding to your system architecture (32-bit or 64-bit).
Can I use alternative PDF readers to open Azure Information Protection PDFs?
Yes, but the alternative PDF reader must natively support Microsoft Purview Information Protection or have a compatible plug-in installed. Otherwise, the protected content will remain inaccessible.
How do I check if my ADFS certificate is valid on my Windows machine?
Open the Windows Certificate Manager by running 'certmgr.msc'. Navigate to the 'Personal' > 'Certificates' folder, locate your ADFS certificate, and double-click it to verify its expiration date and trust status.
