Microsoft SharePoint Embedded: Update to driveItem.webUrl behavior

🚨 The Signal: SharePoint Embedded's driveItem.webUrl will now return a dynamic browser URL, not a stable file identifier. Applications must use driveItemId for stable file references, impacting custom applications relying on the old behavior.

The Impact

Developers and security teams are affected, with a risk of broken application functionality and potential data access issues if not updated.

• Developers: Custom applications may break if they rely on webUrl for stable file IDs.
• Security Teams: Need to validate custom application integrity and data access post-change.
• Compliance Teams: Must ensure applications continue to meet data handling requirements.
• Users: May experience broken links or access issues in custom applications.

The Action

1. Identify all SharePoint Embedded applications using driveItem.webUrl.
2. Review application code to replace driveItem.webUrl with driveItemId for stable references.
3. Test updated applications thoroughly in a non-production environment.
4. Plan for deployment of updated applications before February 2027.
5. Consider temporary opt-out if more time is needed for remediation (before August 17, 2026).

Domain: SharePoint · Impact: medium · Workload: SharePoint