How can I add a digital certificate in mail flow? I received a message: DLP policies and DLP-related conditions and actions in Mail flow rules are no longer supported and can no longer be created or edited in the Exchange Admin Center (EAC) or using Excha

Julie A. Wright 0

I am looking for instructions on how to encrypt email in exchange. I tried setting up in mail flow and received this message: : DLP policies and DLP-related conditions and actions in Mail flow rules are no longer supported and can no longer be created or edited in the Exchange Admin Center (EAC) or using Exchange Online PowerShell. We recommend migrating all DLP-related rules to Microsoft Purview DLP in the compliance center as soon as possible. Once you have migrated these rules please delete them here in the EAC or via PowerShell. Learn more: Migrate DLP policies | No DLP-conditions or actions

When I followed the path I received this message: Purview first party app service principal not present in the tenant. Does anyone have a solution to offer?

J N S S Kasyap 80 Reputation points Microsoft Vendor

2025-02-20T06:58:45.6966667+00:00
Hi @Julie A. Wright

Thanks for posting your query!

The issue arises because Microsoft has deprecated the ability to create and manage DLP policies directly through the EAC and PowerShell in Exchange. DLP policies are now exclusively managed within Microsoft Purview (formerly Microsoft 365 Compliance).
The error regarding the "Purview first party app service principal" indicates that the necessary service principal for Purview is not configured correctly in the tenant, likely because of permissions or missing configurations in the tenant’s Azure AD setup.

To resolve this:

Ensure that the Microsoft Purview service is properly set up in your Microsoft 365 tenant.

In case the service principal is missing, the required roles or permissions should be assigned in the Azure Active Directory (Azure AD) portal, which typically requires Global Administrator permissions.

Navigate to the Microsoft Purview compliance portal and review the permissions for DLP management.

If the issue persists, consult Microsoft support for assistance with tenant-specific configuration errors.

Once your DLP policies are set up in Purview, you can enable email encryption. There are different ways to do this:

Use Microsoft’s Information Protection to classify and encrypt emails based on your DLP rules. You can also set up mail flow rules to apply encryption, such as "Do Not Forward" or "Encrypt," within Exchange.

Please refer the following links for useful insights:
https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-configure-app-access-web-apis
https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-service-principal-portal

I hope this information helps. Please do let us know if you have any further queries.

Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues.

Thank you.
J N S S Kasyap 80 Reputation points Microsoft Vendor

2025-02-21T01:40:55.67+00:00

@Julie A. Wright
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Share via

How can I add a digital certificate in mail flow? I received a message: DLP policies and DLP-related conditions and actions in Mail flow rules are no longer supported and can no longer be created or edited in the Exchange Admin Center (EAC) or using Excha

Your answer