The Callback User (required for configuring both the Large Documents and Push Agreements) requires two elements:
- Version 20.13.5 or higher of the Adobe Sign for Salesforce package must be installed
- My Domain must be configured to permit the OAuth authentication of the Callback User
Note:
Neither Large Document transactions nor Push Agreements are supported in the Salesforce Professional Edition.
Establishing the Large Document and Push Agreement services first requires for the callback environment to be defined.
The same site and user can be used for one or both services.
The below instructions recommend that a new and dedicated user and profile be established. This ensures a known, minimally authorized set of permissions are in effect, and establishes a user that is not likely to be disabled, breaking functionality.
The overview of steps required are:
A dedicated user is recommended to grant object permissions for the callback process.
1. Create the new callback user profile
- Clone the Standard User profile
- Name the new profile with an intuitive name (eg: Adobe Sign callback user)
- Edit the profile
- Under Custom Tab Settings, ensure that both Adobe Sign Admin tabs are set to Default On
- Ensure these Visualforce pages are enabled
- echosign_dev1.EchosignAdmin
- echosign_dev1.SalesforceOAuthPage
- Save the profile


2. Create a new user using a standard Salesforce License
- Give the user an intuitive name (eg: Adobe Sign Callback)
- Assign a Salesforce license
- Assign the profile you created above

- Save the new user
- Verify the user to establish the known password
3. Add the Adobe Sign Integrator permission set to the Callback User
- Navigate to: Setup > Administration > Users > Users
- Click on the Full Name link of your callback user
- Mouse over the Permission Set Assignments link at the top of the page and click the Edit Assignments button

When the Permission Set Assignment page opens:
- Select the Adobe Sign Integration User permission set
- Click the Add button to move the permission set into the Enabled column
- Click Save

4. Activate the Callback User in Adobe Sign
By sending an agreement, you generate and activate the user in your Adobe Sign account:
- Log in to Salesforce as the Callback User
- Navigate to the Agreement tab (App Launcher > Adobe Sign for Salesforce > Agreements)
- Click New to open a new agreement page
- Configure a basic agreement
- Add a recipient - any recipient of any type will do, including a completely bogus email address
- Attach a file - any file will do
- Click Send

- Click OK on the post-send page to return to the Agreement
- Click the Cancel button to cancel the Agreement
5 Link the Callback User to Adobe Sign
- Navigate to the Adobe Sign Admin page (App Launcher > Adobe Sign for Salesforce > Adobe Sign Admin)
- Click Link an Account under the Callback User header


You must set up and configure a site for the Adobe Sign Callback so that agreement updates can be pushed to Salesforce in a timely manner.
Note:
If you have not used Salesforce sites in your Salesforce org, you must first register a Force.com domain name that will be used for all your Salesforce sites in the account. (See Registering a Custom Force.com Domain in the Salesforce.com help). Keep in mind that if you are registering a new domain name, it is recommended that you don’t have a very long domain name or the secure web URL may exceed the 255 character limit that Adobe Sign has for callback URLs.
- Navigate to Setup > Platform Tools > User Interface > Sites and Domains > Sites
- Register your site domain name
- Type the name of your desired domain in the text field after the http://
- Click the Check Availability button to ensure the domain is available for your use
- Once you have an available domain, a Success message displays.
- Once you have an available domain, a Success message displays.
- Accept the Terms of Use, and click the Register My Force.com Domain button


4. In the Site Edit page, do the following:
- Set the Site Label value to: Adobe Sign Callback
- Set the Site Name value to: Adobe_Sign_Callback
- Set the Site Contact value to a Salesforce user who will receive notifications about Sites. In most cases, this would be the account admin.
- Set the Default Web Address value to: AdobeSignCallback
- Enable the Active control.
- Set the Active Site Home Page value to: EchoSignCallback
- EchoSign is a legacy name for the Adobe Sign product
- Ensure that Require Secure Connections (HTTPS) is enabled
- Ensure that Upgrade all requests to HTTPS is enabled
The fields should look like this:

6. Add the IP ranges for public access settings in the Site so that it is restricted properly to Adobe Sign IPs
a. From the Site Details page for your Callback Site, click the Public Access Settings button
b. Click the Login IP Ranges link to jump to the appropriate section
c. Click the New button
d. In the Login IP Ranges dialog, enter the first IP address range:
○ Start IP Address: 52.71.63.224
○ End IP Address: 52.71.63.255
○ Description: Adobe Sign
e. Click Save

Note:
If the error “The list of IP Ranges does not cover your current IP address….” displays, enable the Save this IP Range even though it does not cover my current IP address option and click Save again.
Start IP | End IP | Description |
13.126.23.0 | 13.126.23.31 | Adobe Sign |
3.236.206.64 | 3.236.206.95 | Adobe Sign |
40.67.154.249 | 40.67.154.249 | Adobe Sign |
40.67.155.112 | 40.67.155.112 | Adobe Sign |
40.67.155.147 | 40.67.155.147 | Adobe Sign |
40.67.155.185 | 40.67.155.185 | Adobe Sign |
44.234.124.128 | 44.234.124.159 | Adobe Sign |
51.105.221.160 | 51.105.221.191 | Adobe Sign |
52.196.191.224 | 52.196.191.255 | Adobe Sign |
52.35.253.64 | 52.35.253.95 | Adobe Sign |
52.48.127.160 | 52.48.127.191 | Adobe Sign |
52.58.63.192 | 52.58.63.223 | Adobe Sign |
52.65.255.192 | 52.65.255.223 | Adobe Sign |
52.71.63.224 | 52.71.63.255 | Adobe Sign |

Large documents are automatically supported for sending transactions and background actions up to certain limits:
- Send Transactions—When clicking the Send for Signature button on the Agreements page, you can send a single document that is up to 4.0 MB or multiple documents whose summed size is up to 4.0 MB.
- Background Actions—When sending document using background actions, a single document up to 9.0 MB or multiple documents whose summed size is up to 9.0 MB can be sent. (See the Advanced Customization guide for more information on background actions.)
To enable larger documents, you must do the following:
- Edit the Callback User profile to grant additional access
- Enable the Attachment Service Invocation Count for the Callback User profile
- Edit the Site to enable the LargeFileDownloadService Apex class
- Update the Custom Settings to use the Callback URL
To enable Object Level Permissions for the Adobe Sign Callback Site User, do the following.
- Click the Edit button on the Adobe Sign Callback Profile page and scroll down to Custom Object Permissions
- Enable all the Agreements object permissions (Read, Create, Edit, Delete, View All, Modify All)
- Enable the echosign_dev1. AgreementAttachmentDownloadService Apex class
- Click Save

- Navigate to Object Manager > Agreement > Fields & Relationships
- Click on the Field Label Attachment Service Invocation Count
- Click the Set Feild-Level Security button
- Enable both Visible and Read-Only for the Callback User profile
- Click Save

You must also customize the profile for your Adobe Sign Callback site to add the LargeFileDownloadService Apex class so it is visible
- Navigate to Setup > Platform Tools > User Interface > Sites and Domains > Sites
- Click the site label for the Adobe Sign Callback site
- Click the Public Access Settings button


- From the Available Apex Classes list on the left, select the echosign_dev1.LargeFileDownloadService and click Add to move it to the Enabled Apex Classes list on the right as shown below.
- Click Save

1. Navigate to Setup > User Interface > Sites and Domains > Sites
2. Click the Site Label for the callback site
3. In the Custom URLs section, click the View link
- A new tab will open

4. From the new tab, copy the value of the URL in the browser and paste it into a text file.
- If you are testing on Sandboxes, copy the http URL and not the https URL.
Your URL should look something like the URL shown below:

5. Navigate to Setup > Platform Tools > Custom Code > Custom Settings
- This loads the Custom Settings page
6. Click the label Adobe Sign Settings
- The Adobe Sign Settings page will load



9. Set the Callback URL Adobe to Salesforce Site value to the value of the ‘Secure Web Address’ you copied after configuring your Adobe Sign Callback site (see Step 7 above).
- Make sure the address prefix is ‘https’ and not ‘http’.

You can use the Adobe Sign API to send agreements for signature or create web form and embed them on your website and have all those agreements pushed and created in Salesforce just as if they were sent from Salesforce. You can also send agreements via the echosign.adobe.com web application and have them all pushed back to Salesforce.
To enable these Push Agreements, you must:
- Edit the Callback User to provide the Adobe Sign Integration User permission set
- Edit the Callback Site to add the EchoSignAgreementPushCallback Visualforce page
- Edit the Site Object and Field level permissions
- Any use sepcific configurations, depending on how you intend to use Adobe Sign
- Navigate to Setup > Administration > Users > Users
- Find the Callback User and click on the Full Name link to open the User Detail page


4. In the Available Permission Sets section, select Adobe Sign Integration User
- Click the Add button
- Click Save

- Navigate to Setup > Platform Tools > User Interface > Sites and Domains > Sites
- Click the site label for the Adobe Sign Callback site


4. Locate echosign_dev1.EchoSignAgreementPushCallback and single click it to select it
5. Click Add to move the page to the Enabled Visualforce Pages side
6. Click Save

After adding the Visualforce page, you are returned to the Site Details page for the callback site.
- Click Public Access Settings to open the Profiles page
- Click Edit on the Profiles page
- Scroll down to the Standard Objects Permissions section
- Enable Read and Create for the following objects:
- Account
- Contact
- Contract
- Lead
- Opportunity
- Click Save, which returns you to the callback profile
Several objects require field level adjustments also:
- Scroll down to the Field-Level Security section and edit:
- Standard Field-Level Security
- Contact
- Account > ensure Read and Edit Access are enabled
- Email > ensure Read and Edit Access are enabled
- Name > ensure Read and Edit Access are enabled
- Lead
- Company -> ensure Read and Edit Access are enabled
- Email -> ensure Read and Edit Access are enabled
- Name -> ensure Read and Edit Access are enabled
- Contact
- Standard Field-Level Security
If you would like all of the agreements in your account that were sent outside of Adobe Sign to be created and pushed into Salesforce, follow these instructions:
- Copy the secure URL address from the Adobe Sign Callback Site you created and append /echosign_dev1__EchoSignAgreementPushCallback to compose the callback URL. Contact Adobe Support and provide them with your callback URL to set as your Adobe Sign account’s default callback URL. For example: If your site address is: https://echov11-dev.na12.force.com/AdobeSignCallback the callback URL will be: https://echov11-dev.na12.force.com/AdobeSignCallback/echosign_dev1__EchoSignAgreementPushCallback
- Adobe Support should also enter your Adobe Sign userID for the default callback URL API user setting. All accounts using Salesforce should also have their accounts set to append the document key to the callback URL.
If you are sending agreements via the API, follow these instructions:
- Copy the secure URL address from the Adobe Sign Callback Site you created and append /echosign_dev1__EchoSignAgreementPushCallback to create the callback URL to be used in the Adobe Sign API.
- For example: If your site address is: https://echov11-dev.na12.force.com/AdobeSignCallback
the URL you should use in the Adobe Sign API will be: https://echov11-dev.na12.force.com/AdobeSignCallback/echosign_dev1__EchoSignAgreementPushCallback
- For example: If your site address is: https://echov11-dev.na12.force.com/AdobeSignCallback
- When sending an agreement or creating a web form through the API you will need to provide a callback URL (see https://secure.echosign.com/redirect/latestApiMethods and reference the API parameter ‘CallbackInfo’.)
- Also make sure that your account settings are set to append the document key to the callback URL that should be the default for Salesforce customers using Adobe Sign. For any issues, contact Adobe Sign support.
- Additionally, go to Push Mappings Settings to define preferences for how records are created when agreements are pushed to Salesforce.