Connect EqualWeb to SharePoint Online

The setup, start to finish

1. Create the app in Microsoft Entra

   1. Go to entra.microsoft.com → Identity → Applications → App registrations
   2. Click New registration
   3. Name it EqualWeb PDF Accessibility and click Register (no Redirect URI needed)
   4. On the app page, copy and save two values: the Application (client) ID and the Directory (tenant) ID

2. Create a Client Secret

   1. In the app menu: Certificates & secrets → New client secret
   2. Description: EqualWeb · recommended expiry: 24 months
   3. Copy the Value column immediately - it is shown only once
   4. Note the expiry date: before it lapses, create a new secret and update it in your EqualWeb settings

3. Add the Sites.Selected permission

   1. In the app menu: API permissions → Add a permission → Microsoft Graph → Application permissions
   2. Search for and select Sites.Selected → Add permissions
   3. Click Grant admin consent for your organization and confirm

   Sites.Selected means the app has access to no site at all until you explicitly grant it a specific one - that is the next step.

4. Grant access to your specific site

   1. This is a one-time Graph call - the EqualWeb team will gladly do it with you on the onboarding call
   2. Open Graph Explorer (aka.ms/ge) and sign in as admin
   3. Run the request below (get the site-id from GET /v1.0/sites/yourcompany.sharepoint.com:/sites/Documents)
   POST https://graph.microsoft.com/v1.0/sites/{site-id}/permissions { "roles": ["write"], "grantedToIdentities": [{ "application": { "id": "<Application (client) ID from Step 1>", "displayName": "EqualWeb PDF Accessibility" }}] }

5. Enable single sign-on for your users (strongly recommended)

   1. In the app you created: Expose an API → Set the Application ID URI - accept the default api://<Application (client) ID>
   2. Add a scope: name access_as_user, Who can consent: Admins and users → save
   3. Once the EqualWeb package (the .sppkg file supplied by EqualWeb) is installed in your tenant App Catalog, approve its permission request: SharePoint admin center → Advanced → API access → Approve

   From that moment, right-clicking a PDF opens EqualWeb with the user already signed in - their identity comes from their own Microsoft account. Zero passwords.

What you'll collect

What permissions the app gets - and why

🔒 You stay in control: the grant is per-site, and your admin can revoke it at any time.

Activate in EqualWeb

Go to login.equalweb.com → PDF Integration → SharePoint → Settings, enter the values you collected, click Save and then Test connection.

From the moment you connect, EqualWeb automatically classifies every document by treatment priority - required for service, published to the public, internal, or archive - including public-exposure detection. In the Classification screen you can tag whole folders, exclude items (reversibly), and set an archive policy - and remediation is one click away.