14.4 Outlook web add-in (OWA, new Outlook, Outlook for Mac)
In compose, read and meeting-organizer windows, the user clicks
ADA Data Classification to open the pane and choose a
label. Applying a label: - writes the x-ada-classification
headers - adds the subject marker - adds the footer marking (the top
marking is added at send)
When the user clicks Send, the add-in checks the mail. With the Exchange Online manifest the reason appears in Outlook’s Smart Alerts dialog. Microsoft’s Don’t Send button is relabelled Choose label and opens the Ada pane (Mailbox 1.14+). With the on-premises manifest the send is hard-blocked and the reason appears in an information bar on the message.
| Condition | Message |
|---|---|
| No label | “You must choose a sensitivity label before sending this email. Use the button below to open the Ada panel and pick a label.” |
| Label blocked from sending | “Emails with this sensitivity label (”{label}“) are blocked from being sent.” |
| Unlabelled attachment | “Attachment”{file}” is not classified. Unclassified documents cannot be emailed — …” |
| Attachment label not mailable | “Attachment”{file}” is classified “{label}”. Company policy does not allow emailing files with this label; remove the attachment.” |
| Attachment above mail label | “Attachment”{file}” is labeled “{a}”; the email is “{m}”. Remove the attachment or classify the email as at least “{a}”.” With the Exchange Online manifest, adding a higher-labelled attachment raises the mail label automatically. |
| Content requires another label | “Sensitive data detected in the email requires exactly the”{label}” label. Current label: “{current}”. Set the classification to “{label}”.” |
| Recipient restriction | “Emails classified as”{label}” can only be sent to: {allowed}. Recipients not allowed: {recipients}.” |
| Check failed | “Classification could not be verified, so sending was blocked. Try again or contact IT support. ({error})” |
Masking rules replace the matching values with ***
automatically, and the send continues.
Send anyway appears only in two cases: - A warn rule in confirm mode. The administrator’s message is shown. Ada logs that the warning was shown but cannot see the user’s choice. - A recipient rule produced a lower label than the content suggests: “Based on its recipients this email was labeled”{a}“, but its content suggests”{b}“. Choose”Choose label” to raise it; “Send anyway” sends it as “{a}”.”
When the server cannot be reached: - The pane uses the last verified policy cached in the browser, re-checking its signature. - With no cached copy it shows “Ada classification policy is not available on this device yet. The add-in could not reach the Ada server and no previously verified policy is cached. …”. - Audit events are queued in browser storage and sent later. - If Offline agents (stale policy) is set to strictest and the policy is older than the configured days, the strictest settings apply.
14.5 Summary: which policy setting produces which user experience
| Policy setting (console) | Windows | macOS | Web add-in |
|---|---|---|---|
| Require label on save | Office save dialog | File-agent picker after save (macOS save prompt) | — |
| Require label on send | Classic Outlook dialog | Outlook for Mac send check | OWA / new Outlook send check |
| Require label on print | Word, Excel, Outlook | — | — |
| Copy block / copy with justification | Word, Excel, PowerPoint, Outlook | — | — |
| Justification on downgrade | Dialog | Dialog | Pane field |
| Warn rule | Dialog / toast | Pop-up | Pane banner / Smart Alert |
| Mask rule | Confirmation dialog | Pop-up, then Office save | Automatic at send |
| Unlabelled file warnings | Tray list + toast | Menu bar list + pop-up | — |
| Awareness | Toast | Pop-up | — |
| Screen watermark | Overlay | Overlay | — |
| Screen-capture protection | Office windows black in captures | — | — |