Adobe Sign for SharePoint Online - Workflow Installation Guide

Adobe Sign Workflow Actions for SharePoint Online allows SharePoint workflow administrators to add Adobe Sign actions into SharePoint Workflows through SharePoint workflow designer. The solution is available for Microsoft SharePoint Online instances as a plugin. It enables users to create a list workflow on a custom list or a document library, which can be used by SharePoint users to

• Send documents to a single recipient or sending to a batch of recipients using SharePoint lists, and mapping data from SharePoint lists into documents when the documents are sent for signature.
• Check status of the agreement.
• Cancel the agreement after it's been sent out for signature.
• Download the signed agreement into a list attachment (in case of custom lists) or as a document with a different name (in case of document libraries)

Requirements

The Adobe Sign solution can only be installed and configured by a Microsoft SharePoint administrator; you also need administrative privileges on the SharePoint server to install the solution. Please consult SharePoint documentation and your organization’s SharePoint administrator for additional systems permissions that may be required to install SharePoint plugins. To configure the solution, you also need to be an account administrator on Adobe Sign and have access to your Adobe Sign account API Key. System requirements below encompass both the server and client components required to successfully install and run Adobe Sign for SharePoint.

• Microsoft SharePoint hosted
• Internet Explorer 11+

Install the Adobe Sign WSP on Site Collection

Upload and Activate the .wsp Package

1. Obtain the latest .wsp package from your success manager (existing installations only)

• Note: Workflow has been depreciated, and is not available for new installations. Instead, please refer to the Microsoft Flow instructions

2. Navigate to Site Collection > Site Settings > Web Designer Galleries > Solutions

Note: _catalogs/solutions/Forms/AllItems.aspx

3. Upload the .wsp file

4. Activate site feature manually:

• Navigate to Site Settings > Site Actions > Manage site features
• Click the Activate button next to Adobe eSign Workflow Actions
• Click the Activate button next to Adobe eSign Workflow Actions Config List

Populate the eSign Config List

Populating the eSign Config list requires you to generate and input several unique fields. 

It is recommended that you open Notepad or some other text editor so you can save the generated keys, then input them all at one time.

You need to:

• Generate the eSignIntegrationKey (done in the Adobe Sign app)
• Obtain the spTenantID in SharePoint
• Generate the spClientID and spClientSecret keys in SharePoint
• Grant the new service principal permissions in SharePoint
• Insert the eSignConnectorURL

Step 1: Generate the eSignIntegrationKey

To generate an Integration Key in Adobe Sign:

1. Log in to your administrative user for your Adobe Sign account

2. Navigate to Account > Adobe Sign API > API Information

3. Click the Integration Key link in the middle of the page

The Create Integration Key interface loads:

1. Provide an intuitive name for your key (e.g. SharePoint)

2. The Integration Key must have the following elements enabled:

• agreement_read
• agreement_write
• agreement_send
• library_read

3. Click Save once the key is configured.

The Access Tokens page is exposed showing the keys defined in your account.

4. Click the key definition created for SharePoint

• The Integration Key link is exposed at the top of the definition.

5. Click the Integration Key link

The Integration key is exposed:

6. Copy this key and save it to add to the eSign Config List

7. Click OK

• You are now done in the Adobe Sign application and can log out

Step 2: Obtain the spTenantID

To obtain the spTenantID value:

1.        Navigate to Site Settings > Users and Permissions > Site App Permissions.

2.       Under the App Identifier, copy the part after @

• ie: i:0i.t|ms.sp.ext|d559ac84-d8e6-4515-9229-89w01@870fe83b-ye9d-96d3-n1d0-9et51ar2e792e

3. Save this value to insert into the eSign Config List

Step 3: Generate the spClientID and spClientSecret keys

To generate the spClientID and spClientSecret keys:

1. In the URL for your SharePoint site, after sharepoint.com/sites/{yoursite} paste the following string: _layouts/15/appregnew.aspx

• A new page opens that allows you to generate both keys

2. Click the Generate buttons for both Client ID and Client Secret

3. Copy both keys and save them to enter into the eSign Config List

4. Insert the following literal values into the remaining fields:

• Title – Adobe Sign
• App Domain – spintegration.echosign.com/sharepoint
• Redirect URL – https://spintegration.echosign.com/sharepoint

5. Click Create

• This puts a new service principal in Azure AD
• You can reuse the same principal across site collections

Step 4: Grant the new service principal permissions

Grant the new service principal permissions to the site by

1. In the URL for your SharePoint site, after sharepoint.com/sites/{yoursite} paste the following string: _layouts/15/appinv.aspx

• This has to be done on every site where workflows are expected to run

The fields should contain the content for the application from the previous step:

• App Id – This is the Client ID you just generated
• Title – Adobe Sign
• App Domain – spintegration.echosign.com/sharepoint
• Redirect URL - https://spintegration.echosign.com/sharepoint

2. Copy and paste the below code into the Permission Request XML: field

3. Click Create

4. Click Trust It when the page reloads

You can see the resulting permissions in Site Settings > Site App Permissions

Step 5: Insert the eSignConnectorURL

The eSignConnectorURL is the literal value:  https://spintegration.echosign.com/sharepoint

Configure the eSignConfig List

1. In the Site Contents of the site where the Adobe eSign Workflow Config List feature was activated, find and click on the eSignConfig list

2. Create new item to open a new config form

3. Fill in the following values:

• Title - "Config"
• spClientID – Insert the ClientID value from Step 3
• spClient Secret – Insert the ClientSecret value from step 3
• spTenantID – Insert the TenantID from step 2
• eSignIntegrationKey – Insert the Adobe Sign Integration Key from step 1
• eSignConnectorURL – Enter: https://spintegration.echosign.com/sharepoint
• debugStatments – No

4. Click Save

Security Considerations for Reading the eSignConfig List from Workflow Action

It is best practice to only allow site collection administrators access to eSignConfig list.

If the workflow is started by the user who has access to eSignConfig list, then the workflow runs without problems. However, if the user does not have access to the list, then the workflow actions need to be wrapped into app step.

1. On the site where the workflow is published

• Navigate to Site Settings > Site Features
• Activate Workflows can use app permissions feature.

2. Get the id of the workflow service principal

• Navigate to Site Settings > Site App Permissions

Example: Workflow i:0i.t|ms.sp.ext|d55e6c84-d8e6-4515-9229-896we4554601@870f107b-dc9d-47d3-9ad0-9d851rr2e762e

3. Give the workflow service principal permissions in _layouts/15/appinv.aspx similar to what we did with the actual application

4. Trust the Workflow service principal

Now the app step should be available in SharePoint Designer (restart is required):

Downloadable PDF copy