In this topic, you'll learn how to integrate Reveal Hold with Microsoft Entra ID. When you integrate Reveal Hold with Microsoft Entra ID, you can:
Control in Microsoft Entra ID who has access to Reveal Hold.
Manage your accounts in one central location - the Microsoft Entra ID portal.
Add Reveal Hold from the Gallery
Note
To configure the integration of Reveal Hold into Azure AD, you need to add Reveal Hold from the gallery to your list of managed SaaS apps.
Sign in to the Microsoft Entra ID portal with an Microsoft Entra ID subscription (Application Administrator account).
Select the View button beneath the Manage Microsoft Entra ID tile.
Select the Enterprise applications section.
Select + New application.
Search for 'Reveal Hold' and select the Reveal Hold tile.
Select Sign up for Reveal Hold (bottom right corner).
Select your Application Administrator account.
Select Consent on behalf of your organization (recommended) and click Accept.
With 'Consent on behalf of your organization' selected, custodians do not have to consent when logging in. It makes life easier for them.
The Reveal Hold application is added and you will be signed in. However, since no roles have been set yet for Reveal Hold, you will be directed to the empty Custodian Portal.
Close this tab and continue with Step 2 below to assign roles to Reveal Hold.
Assign Users and Roles to Reveal Hold
Microsoft Entra ID uses a concept called assignments to determine which users should receive access to selected apps. Decide which users and/or groups in Microsoft Entra ID need access to Reveal Hold. Once decided, you can assign these users and/or groups to Reveal Hold by following the instructions here. The following roles can be assigned to users: System Administrator, Global Hold Manager, Global Hold Viewer , Matter Manager, Matter Viewer and Custodian.
Note:
At a minimum, assign one user (with an Microsoft Entra ID Application Administrator account) as System Administrator (to synchronize contacts) and one user as Global Hold Manager (to test sending preview emails).
Custodians do not require a role in the Microsoft Entra ID portal when the "User assignment required" is set to No. This is preferred. Users without a role assigned will only have access to the Custodian portal of Reveal Hold when added to a hold. If you need to restrict access to the custodian portal for specific users, then you can use the custodian role assignment.
Refresh the Enterprise applications section.
Search for 'Reveal Hold' and select the 'IPRO Reveal Hold' application.
Select the 1. Assign users and groups tile.
Select + Add user.
Select Users and groups.
In the right pane, select a user with an Microsoft Entra ID Application Administrator account, and click Select at the bottom.
Select Select a role.
In the right pane, select the System Administrator role, and click Select at the bottom.
In the bottom left corner, select Assign.
Repeat step 4 to 9, but now assign a user with the Global Hold Manager Role.
Note
This user does not need to have an Microsoft Entra ID Application Administrator account.
Synchronize Contacts
To ensure your contacts are kept up to date, follow the steps outlined in the Address Book Synchronization article to synchronize your contact list.
Enable Sending Emails
In this section you'll learn how to enable Reveal Hold to send email messages on your behalf.
Prerequisite: You need a user with the Reveal Hold Global Hold Manager role. This user needs to have an Office 365 license with Exchange Online element enabled. Please check this at Home > Users > "User with IPRO Reveal Hold Global Hold Manager role" > Licenses.
Go to https://legalhold.one (Depending on previous settings, you might have another domain, like .eu).
Log in with the user that has the Reveal Hold Global Hold Manager role.
In the top right user menu, you can navigate to Profile Settings.
Click in the Email Preferences section on Enable, to enable email sending.
Click Accept in the Permissions Requested pop-up to allow Reveal to send emails on your behalf.
Now you can send a test message to check if Reveal Hold is able to send email messages. Click on Send Test Message.
Click Yes to send the message. Check your Inbox to see if the message has been sent.
Alternatively, as a Global Hold Manager, test sending emails using the email message preview option.
In the menu on the left, select Configuration >Message Templates.
Select
.Define a Name (for example, Test Message), Type, Subject and a write a bit of content. Click Save (bottom right corner).
On the Message Templates page, select Preview Message Template.
Select
.Select the user with the Reveal Hold Global Hold Manager role.
Select Accept.
The preview message has been sent.
You have now learned how to integrate Reveal Hold with Microsoft Entra ID. You have synchronized your contacts and you have sent a preview message. All users with a Global Hold Manager role can now use Reveal Hold and start creating legal holds.
In this topic, you'll learn how to integrate Reveal Hold with Microsoft Entra ID. When you integrate Reveal Hold with Microsoft Entra ID, you can:
Control in Microsoft Entra ID who has access to Reveal Hold.
Manage your accounts in one central location - the Microsoft Entra ID portal.
Add Reveal Hold from the Gallery
Note
To configure the integration of Reveal Hold into Azure AD, you need to add Reveal Hold from the gallery to your list of managed SaaS apps.
Sign in to the Microsoft Entra ID portal with an Microsoft Entra ID subscription (Application Administrator account).
Select the View button beneath the Manage Microsoft Entra ID tile.
Select the Enterprise applications section.
Select + New application.
Search for 'Reveal Hold' and select the Reveal Hold tile.
Select Sign up for Reveal Hold (bottom right corner).
Select your Application Administrator account.
Select Consent on behalf of your organization (recommended) and click Accept.
With 'Consent on behalf of your organization' selected, custodians do not have to consent when logging in. It makes life easier for them.
The Reveal Hold application is added and you will be signed in. However, since no roles have been set yet for Reveal Hold, you will be directed to the empty Custodian Portal.
Close this tab and continue with Step 2 below to assign roles to Reveal Hold.
Assign Users and Roles to Reveal Hold
Microsoft Entra ID uses a concept called assignments to determine which users should receive access to selected apps. Decide which users and/or groups in Microsoft Entra ID need access to Reveal Hold. Once decided, you can assign these users and/or groups to Reveal Hold by following the instructions here. The following roles can be assigned to users: System Administrator, Global Hold Manager, Global Hold Viewer , Matter Manager, Matter Viewer, and Custodian.
Note:
At a minimum, assign one user (with an Microsoft Entra ID Application Administrator account) as System Administrator (to synchronize contacts) and one user as Global Hold Manager (to test sending preview emails).
Custodians do not need a role assigned in Entra ID. In the Entra admin center, open the IPRO LEGAL HOLD enterprise application and go to Manage > Properties. Make sure Assignment required? is set to No — this is the preferred setting. With it set to No, any user in your tenant can sign in to Legal Hold, and custodians will only see the Custodian portal once they are added to a hold. If you set it to Yes, only users you explicitly assign under Users and groups can sign in; use the Custodian role assignment if you need to restrict the Custodian portal to specific users.
.png)
Refresh the Enterprise applications section.
Search for 'Reveal Hold' and select the 'IPRO Reveal Hold' application.
Select the 1. Assign users and groups tile.
Select + Add user.
Select Users and groups.
In the right pane, select a user with an Microsoft Entra ID Application Administrator account, and click Select at the bottom.
Select Select a role.
In the right pane, select the System Administrator role, and click Select at the bottom.
In the bottom left corner, select Assign.
Repeat step 4 to 9, but now assign a user with the Global Hold Manager Role.
Note
This user does not need to have an Microsoft Entra ID Application Administrator account.
Synchronize Contacts
To ensure your contacts are kept up to date, follow the steps outlined in the Address Book Synchronization article to synchronize your contact list.
Enable Sending Emails
In this section you'll learn how to enable Reveal Hold to send email messages on your behalf.
Prerequisite: You need a user with the Reveal Hold Global Hold Manager role. This user needs to have an Office 365 license with Exchange Online element enabled. Please check this at Home > Users > "User with IPRO Reveal Hold Global Hold Manager role" > Licenses.
Go to https://legalhold.one (Depending on previous settings, you might have another domain, like .eu).
Log in with the user that has the Reveal Hold Global Hold Manager role.
In the top right user menu, you can navigate to Profile Settings.
Click in the Email Preferences section on Enable, to enable email sending.
Click Accept in the Permissions Requested pop-up to allow Reveal to send emails on your behalf.
Now you can send a test message to check if Reveal Hold is able to send email messages. Click on Send Test Message.
Click Yes to send the message. Check your Inbox to see if the message has been sent.
Alternatively, as a Global Hold Manager, test sending emails using the email message preview option.
In the menu on the left, select Configuration >Message Templates.
Select
.Define a Name (for example, Test Message), Type, Subject and a write a bit of content. Click Save (bottom right corner).
On the Message Templates page, select Preview Message Template.
Select
.Select the user with the Reveal Hold Global Hold Manager role.
Select Accept.
The preview message has been sent.
You have now learned how to integrate Reveal Hold with Microsoft Entra ID. You have synchronized your contacts and you have sent a preview message. All users with a Global Hold Manager role can now use Reveal Hold and start creating legal holds.