Skip to main content
Start Free TrialBook a meeting
PDF Tools · Integrations · Setup guide

Connect EqualWeb to Google Workspace (Drive)

EqualWeb scans, scores and remediates the PDFs in your organization's Drive. The connection uses a dedicated Service Account with Domain-Wide Delegation - Google's standard for enterprise integrations - created in your own Google Cloud project.

  • Super Admin permission in Google Workspace (for Step 3)
  • Access to Google Cloud Console (any user in the domain; free to create on first use)
Step by step

The setup, start to finish

  1. Create a Service Account

    1. Go to console.cloud.google.com and select or create a project (for example EqualWeb-PDF)
    2. APIs & Services → Library → search for Google Drive API → Enable
    3. IAM & Admin → Service Accounts → Create service account
    4. Name: equalweb-pdf → Create and continue → (no roles needed) → Done

  2. Create a JSON key

    1. Click the new service account → Keys tab → Add key → Create new key → JSON → Create
    2. A JSON file downloads - store it securely, it is issued once
    3. From the file you will need two values: client_email (the service-account address) and private_key (the whole block, including the BEGIN/END lines)
    4. Also copy the numeric Unique ID from the service-account page - needed in Step 3

  3. Authorize Domain-Wide Delegation (admin)

    1. Go to admin.google.com → Security → Access and data control → API controls
    2. At the bottom: Manage Domain Wide Delegation → Add new
    3. Client ID: paste the numeric Unique ID from Step 2
    4. OAuth scopes: paste exactly https://www.googleapis.com/auth/drive → Authorize
    5. Decide which user the scan represents (user to impersonate) - usually a dedicated account or the admin who manages the documents; the scan sees what that user sees in Drive

  4. Install the Drive add-on for the whole organization (SSO)

    1. From Google Workspace Marketplace, install the EqualWeb PDF Accessibility add-on for the whole domain: Domain install → Everyone - the admin approves the permissions once, on behalf of everyone
    2. Every user now sees the EqualWeb icon in Drive's side panel - and opening any PDF shows the panel already signed in: identity comes from the user's own Google account (single sign-on), with no extra password

What you'll collect

Field in EqualWeb settingsWhere it comes from
Service account emailclient_email from the JSON file
Service account private key (PEM)private_key from the JSON file
Workspace user to impersonateYour decision in Step 3

What permissions the app gets - and why

PermissionWhy it's needed
Google Drive API (drive scope)As the single user you chose (impersonation) - the app sees only what that user sees. Used to read PDFs, save the accessible copy in the same folder, and stamp accessibility status on the file

🔒 You stay in control: the authorization lives in your own Admin Console and can be revoked at any moment by removing the Client ID from Domain Wide Delegation.

Finish

Activate in EqualWeb

Go to login.equalweb.com → PDF Integration → Google Workspace → Settings, enter the values you collected, click Save and then Test connection.

From the moment you connect, EqualWeb automatically classifies every document by treatment priority - required for service, published to the public, internal, or archive - including public-exposure detection. In the Classification screen you can tag whole folders, exclude items (reversibly), and set an archive policy - and remediation is one click away.

Set it up together - book a call Try the live cloud demo
Talk to a specialistBook a meeting