Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,371 questions
Why PDFs with Sensitivity Labels sent to external recipients can not be opened?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 13%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Brajesh
0
Reputation points
When I send Office documents (doc, xls etc.) with Sensitivity Labels to external non-Microsoft M365 users (e.g., Google, Yahoo, or Outlook), they can access them without issues with OTP, Google Sign in, etc.
However, if I convert/save these documents as PDFs (retaining the same Sensitivity Label), the recipients cannot open them, even using the EDGE browser. Instead, they are prompted to sign in with a work or school account. I have not tried with a guest account but why is it like this?
How others are sending PDFs with Sensitivity label to external users?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 61%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
phemanth 13,620 Reputation points Microsoft Vendor2025-02-04T09:39:14.0933333+00:00 Welcome to the Microsoft Q&A forum.
The issue you're encountering with PDFs and Sensitivity Labels is related to how the encryption and permissions are handled for different file types. When you apply Sensitivity Labels to Office documents (like Word, Excel, etc.), the encryption settings are often more flexible and can be accessed by external users through various sign-in methods like OTP or Google Sign-In
However, when these documents are converted to PDFs, the encryption and permissions settings might not translate as seamlessly. PDFs with Sensitivity Labels often require the recipient to have a work or school account to access the content, which is why external recipients are prompted to sign in with such an account
Please Check the below steps:
- Use a Secure Portal: Instead of sending the PDF directly, upload it to a secure cloud service like OneDrive or SharePoint. Share the link with the external recipients, allowing them to access the file through the web interface
- Microsoft 365 Message Encryption (OME): Use OME to send encrypted emails with attachments. This method ensures that external recipients can access the protected content securely through a web portal
- Check Sensitivity Label Settings: Review and adjust the settings for your Sensitivity Labels to ensure they allow external access for PDFs. This might involve configuring the labels to be more permissive for external users
By using these methods, you can help ensure that your external recipients can access the PDFs without encountering sign-in issues.
I hope the above steps will resolve the issue, please do let us know if issue persists. Thank you
Sign in to comment
Sign in to answer