A website for reading and replying to protected email when it cannot be opened inline, for example by outside recipients of branded messages, who sign in with a social account or one-time passcode. Revoking or expiring Advanced Message Encryption mail only works for messages opened there.
Also called OME portal.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Encrypted message portal in context, with comparison tables and the common traps.
Terms in this definition
- Agents (classic) API
First-generation Foundry Agent Service API, based on threads, messages and runs. It is deprecated, replaced by conversations and responses, and retires on 31 March 2027.
- One-time passcode
If a recipient lacks a work, school or social account, Microsoft Purview Message Encryption can email them a code to open the encrypted message portal instead. Admins switch this off through Set-OMEConfiguration's -OTPEnabled parameter.
- Encryption
Scrambling data so it cannot be read without the correct secret key, which is then used to turn it back again. Hashing, by contrast, cannot be reversed.
Related terms
- Microsoft Purview Advanced Message Encryption
An add-on that extends Microsoft Purview Message Encryption for mail read by external recipients in the encrypted message portal. It brings revocation, expiry dates, several branding templates and logs of portal activity.
- Wrapper message
Recipients not on Outlook, Gmail users for example, get this email from Microsoft Purview Message Encryption. It links to the encrypted message portal, where signing in reveals the message.