The Adobe Sign for SharePoint Online installation package is available to any enterprise level account that is interested in installing the Adobe Sign solution. Prior to installation, contact your Success Manager to ensure the account is established in the correct channel to enable the required API functionality.

Overview

The Adobe Sign integration for Microsoft SharePoint provides an integrated solution for creating, sending, tracking and managing electronic signatures.

This documentation, and the installation package it refers to, are developed for Microsoft SharePoint Online multi-tenant (generally referred to as “SharePoint” throughout this guide).

The solution is developed as an add-in application for SharePoint and provides:

  • Send an agreement from any SharePoint document library, or list, for signature
  • Ability to send documents to a single recipient or group of recipients from a document library or custom SharePoint lists
  • Map data from SharePoint lists as well as from a document library into documents through merge mapping when the documents get sent for signature
  • Map data from form fields of signed agreements into textual columns of SharePoint lists as well as a document library through data mapping when the document has been signed and its status has been either automatically or manually refreshed through the Agreement Status page
  • Leverage Adobe Sign web forms to collect data and automatically push that data to designated fields in SharePoint lists.
  • Archival of all signed agreements within SharePoint
  • Ability to add the Adobe Sign Manage page as a SharePoint web part, which can be used by SharePoint users for tracking and updating Agreements


Requirements

To configure the solution, you MUST be both a SharePoint site admin and an Adobe Sign account admin. If you are not Adobe Sign account admin, please work with him or her to configure the integration. 

The Adobe Sign solution can only be installed and configured by a Microsoft SharePoint site administrator. Please consult SharePoint documentation and your organization’s SharePoint site, or tenant administrator, for additional systems permissions that may be required to install SharePoint site solutions.

In the Microsoft Office 365 tenant, the first name, last name and work email address must be set for all SharePoint users who want to access the Adobe Sign add-in on their SharePoint sites.

All users of the Adobe Sign solution need to be present the SharePoint site's default site members or default site owners group. All Adobe Sign users need to have at least Edit permissions on the site.


Supported browsers

Chrome, Firefox, and Safari browsers are all supported

Internet Explorer 11 and above (Including Edge)

In order for SharePoint add-ins to work, some configuration of Trusted Sites in Internet Explorer / Edge is required.  Internet Explorer 10 and older are not supported.

Additionally, IE 11 / Edge users need to explicitly edit their Trusted Sites settings to include the following URLs:

  • https://*.microsoftonline.com
  • https://*.sharepoint.com
  • https://*.echosign.com

 

To edit your Trusted Sites:

1. Open IE 11

► Edge users press Windows + S

2. Click the Tools (gear) icon, and select Internet options from the drop-down menu

► Edge users type in Internet Options and press Enter

IE11 Options

3. The Internet Options menu opens. Select the Security tab

4. Click on the Trusted Sites icon

5. Click the Sites button

6. Enter one of the URLs above, and click Add

7. Repeat for each URL above

8. Close the Internet Options menu when done.

Trusted Sites HelpX


Upgrading from v1.x

Adobe Sign for SharePoint v2.0 requires additional permissions to be approved via OAuth (webhooks and web form permissions).

Customers that are upgrading from v1.x must update their OAuth credentials to gain access to these new permissions:

1. Update the Adobe Sign add-in to the 2.x package

2. Update the connection to Adobe Sign:

The person who is both the Office Tenant Administrator and an Adobe Sign Account administrator must bring up the settings page for the sharepoint sign integration tenant. 

  • Bring up the integration settings
  • In the “Connect Adobe Sign” panel:
    • Click the Update button (next to Update your Office 365 tenant connection)
    • Sign in with the same credentials as before 
      • The email address used for the original connection is displayed in the first paragraph
  • Close the settings by going back to SharePoint or refresh the window

All sites in the tenant which use the tenant connection should now be able to use web form features  

Note:

It’s important to close or refresh the settings tab even if you want to immediately start setting up web form mappings after re-authentication with Adobe Sign.

Failure to refresh the settings window produces errors on the web forms tab until you do.

If the SharePoint Administrator and the Adobe Sign Account Administrator are different people, both need to collaborate to configure the solution.

For every site that uses the integration, the person who is both the SharePoint Administrator and an Adobe Sign administrator for that particular site must update the site connection for that site:

  • Bring up the integration settings
  • In the Connect Adobe Sign panel:
    • Click the Update button next to Update your SharePoint site connection
    • Sign in with the same credentials as before
      • The email address used for the original connection will be displayed in the first paragraph
  • Close the settings by going back to SharePoint or refresh the window

Once done, users of that particular site should be able to use web form features  

Note:

It’s important to close or refresh the settings tab even if you want to immediately start setting up web form mappings after re-authentication with Adobe Sign.

Failure to refresh the settings window produces errors on the web forms tab until you do.

If the SharePoint Administrator and the Adobe Sign Account Administrator are different people, both need to collaborate to configure the solution.


Installation

Note:

It is not recommended to batch install the Adobe Sign for SharePoint Online add-in on multiple sites via tenant scoped deployment because of the following limitations.

To install the online edition of the Adobe Sign for SharePoint package:

1. Authenticate to the site

2. Navigate to: Site Contents > New > App

Nav to App

 

3. Click SharePoint Store

SharePoint Store

 

4. Search for Adobe Sign in the Find an app search box (top right of the page)

5. Single click the Adobe Sign icon to select it from the search results.

Adobe Sign in Store

 

6. Click the ADD IT button to start the automatic installation

The App installation takes few minutes.

Note:

Once the package is installed, you can navigate to the Adobe Sign Settings page and access links for both this admin/configuration guide, as well as the User guide, and other Adobe Sign resources.

Learn and Support


Configuration - Required

Once the application is installed, there are only two steps required to start sending agreements:

  1. Connect to Adobe Sign with OAuth
  2. Grant SharePoint user permissions


Connect to Adobe Sign with OAuth

Adobe Sign establishes an OAuth connection with your SharePoint environment to facilitate the seamless usage of the application for all users.

Note:

To establish the relationship, you must use an account-level admin in the Adobe Sign application as well as on SharePoint. 

It is recommended that a functional email address be used (e.g.: AdobeSignAdmin@MyDomain.com) if possible to reduce the risk of the admin account being inactivated for any reason.

To establish the OAuth connection:

1. Navigate to the Adobe Sign Settings page 

2. Click the Connect Adobe Sign tab

3. Select the scope that you want to install Adobe Sign:

► Establish SharePoint site connection (Site level - for the SharePoint site administrator)

• This functionality connects the add-in to an Adobe Sign account at the current SharePoint site level

Connect to Adobe Sign

1. Authenticate to Adobe Sign using your admin user credentials

2. Click Allow Access to approve the trusted relationship between Adobe Sign and SharePoint

○ A success message will briefly display once the connection is established

 

Local Auth
OAuth

When you are successfully authenticated at the Site level, you see the email and name of the user that has authenticated to Adobe Sign above the two links.

  • To update this connection, you have two options: 
    • Update to a different Adobe Sign Account at the site level (for SharePoint site admin) 
    • Switch to O365 tenant level connection (for O365 admin, see details below).
Update connection to Adobe Sign

►Connect your SharePoint tenant to an Adobe Sign account (Tenant scope - for the O365 tenant admin only)

• No repetitive OAuth login is required at Adobe Sign for add-in instances connected in tenant scope

• Adobe Sign OAuth performed on any single add-in instance in the global scope sets the Sign linkage to all other installed instances linked in the tenant scope

                                    ○ OAuth must be performed on at least one tenant scoped add-in

• Any newly installed add-in instance is automatically connected to the Adobe Sign account available at the tenant scope

Connect Tenant to Adobe Sign

A confirmation box pops up indicating that you are about to link your tenant to your Adobe Sign account. This requires Microsoft Office 365 administrator login.

  • Click Continue.
Tenant Challenge

1. Authenticate to SharePoint using your admin user credentials

2. Click Accept to approve access to the SharePoint resources

1_tenant_auth1
2_tenant_approveaccess

3. Authenticate to Adobe Sign using your admin user credentials

4. Click Allow Access to approve the trusted relationship between Adobe Sign and SharePoint

○ A success message will briefly display once the connection is established

 

Tenant Auth
OAuth scopes

When you are successfully authenticated at the Tenant level, you see the email and name of the user that has authenticated to Adobe Sign above the two links, along with an assertion that the account is "configured for your SharePoint tenant by your Office 365 tenant administrator."

  • To update this connection, you have two options: update to a different Adobe Sign Account at the tenant level or switch to site level connection.
Connected to Adobe Sign

Note:

If your SharePoint deployment has multiple sites, it is possible that one or more sites can be authenticated at the site level, but a tenant level authentication can exist as well.

If both types of authentication exist, and the Site you are configuring is authenticated at the Site level, a link is exposed that can promote the authentication to the Tenant level.

Promote to existing tenant


Grant SharePoint user permissions

There are two mechanisims to grant SharePoint users access to the Adobe Sign integration:

  • Users with Edit permission 
  • Users in the default members/owners group


Users with Edit permission - "Seamless On-boarding"

Seamless on-boarding is the simplest configuration for adding users.

Any user assigned the default Edit permission level for your SharePoint site automatically has permission to access and use the Adobe Sign integration. 

  • If you used the admin.microsoft.com utilities to create your SharePoint site and assigned Owners, Members, and Visitors to the group, you are done

With the Users with Edit permission option enabled, any user that opens the Adobe Sign add-in (or uses any of its features), triggers a check of the user's permissions for the SharePoint site. If the user has a set of permissions recognized as typical of Editors, access is granted to the add-in.

The table below shows the list of all SharePoint permissions, the default permissions assigned to each permission level, and the required set of permissions to be recognized as a User (User Mask) or Admin (Admin Mask):

 

Permission Reader Contributor User Mask Editor Admin Mask Designer Full Access
3 list: add items   (plus) (tick) (plus) (tick) (warning) (plus) (plus)
7 list: Approve Items         (tick) (plus) (plus)
11 list: Create Alerts (plus) (plus)   (plus)   (plus) (plus)
5 list: delete items   (plus)   (plus) (tick) (plus) (plus)
10 list: Delete Versions   (plus)   (plus) (tick) (plus) (plus)
4 list: edit items   (plus) (tick) (plus) (tick) (warning) (plus) (plus)
1 list: manage lists       (plus) (tick) (warning) (plus) (plus)
8 list: open items (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
2 list: Override List Behaviors         (tick) (plus) (plus)
12 list: view application pages (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
6

list: view items

(plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
9 list: View Versions (plus) (plus)   (plus) (tick) (plus) (plus)
32 personal: Add/Remove Personal Web Parts   (plus)   (plus) (tick) (plus) (plus)
31 personal: Manage Personal Views   (plus)   (plus) (tick) (plus) (plus)
33 personal: Update Personal Web Parts   (plus)   (plus) (tick) (plus) (plus)
17 site: add and customize pages           (plus) (plus)
19 site: Apply Style Sheets           (plus) (plus)
18 site: Apply Themes and Borders           (plus) (plus)
21 site: Browse Directories   (plus)   (plus) (tick) (warning) (plus) (plus)
25 site: browse user information (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
20 site: create groups             (plus)
15 site: create subsites             (plus)
30 site: edit personal user information   (plus)   (plus)   (plus) (plus)
24 site: enumerate permissions             (plus)
26 site: manage alerts             (plus)
13 site: manage permissions             (plus)
16 site: manage web site             (plus)
29 site: open (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
28 site: Use Client Integration Features (plus) (plus)   (plus)   (plus) (plus)
27 site: use remote interfaces (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
22 site: use self-service site creation (plus) (plus)   (plus)   (plus) (plus)
23 site: view pages (plus) (plus) (tick) (plus) (tick) (warning) (plus) (plus)
14 site: View Web Analytics Data             (plus)

The number in the far left column is the order in which these permissions are displayed in the SharePoint UI.

Rows marked with (plus) are permissions assigned to the default role levels.

Rows marked with (tick) are permissions required to be recognized as a User or Admin by the Adobe Sign integration.

Rows marked with (warning) are required for correct functioning of the Admin features for the Adobe Sign integration.


Users in the default members/owners group (with Edit permission)

If you require more control over who may use the Adobe Sign for SharePoint integration, this option grants access to only those users who are direct members of the <site name> Members SharePoint group.

  • If you set up your SharePoint site using the modern experience, an Office365 group was created to manage your site's permissions
    • That Office365 group is added as a member to the SharePoint group of the same name allowing access to be controlled from a central place. 
    • Adding users to the SharePoint site using the modern experience adds members to the Office365 group, not to the SharePoint group. 

To add members to the SharePoint site using the modern experience:

  • Open the settings panel from the gear menu on the top bar
  • Select Site permissions 
    • This opens a new right-hand Permissions panel
  • Click the Advanced permissions link

Note:

Using the Invite people button to invite people to the SharePoint site will not grant them access to the Adobe Sign Integration.

Permissions rail

 

  • Click on the name link for the <site name> Members group to see the members of the SharePoint Site Members group.
Click on the name link for the members group

 

  • Click the New button to get the dialog to add new members to the SharePoint group
Click on the name link for the members group

 

When you are done the new member of the SharePoint group will be displayed in the list of members.

Users in the group

Caution:

Once users are added to the groups, there may be several minutes delay for the Microsoft servers to properly sync up.  This does not impact further configuration, but user testing/usage should be suspended during this window.


Configuration - Optional

The following optional configurations, while not required, can greatly improve the value that Adobe Sign brings.


Choose signed agreement storage

As an administrator, you can define a global target folder where all completed agreements will be deposited for the whole site. This is configured on the Signed File Settings page.

When a global storage folder is defined, all signed agreement and audit trail PDF files are saved automatically in that global storage folder. This includes agreements sent from document libraries as well as lists.

Signed Files Settings

If no global storage folder is set on the Adobe Sign Signed Files Settings page, a new folder called Signed Agreements is automatically created in the document library from which the Agreement was created/sent. All completed Agreements sent from the same library have the completed PDFs returned to the same Signed Agreements folder.

Default folder

 

Agreements sent from lists are attached to the list item (as attachments) if no global default file is identified.

List Attachments

Agreement storage for web forms

If you are using web forms to collect data, a similar storage process can be employed for the signed web form agreements.

The admin can define a global storage folder for all signed web forms.

If a global repository is not defined, the signed web form is stored in an automatically created folder called Signed Web Forms.

Store web form agreements


Enable audit trails

By default, Adobe Sign returns only the signed agreement PDF.  However, if you enable Store audit trail with signed agreement, a second PDF is returned that contains the full Audit Trail for the agreement.

Store audit trails with agreement


Template Mapping

Adobe Sign supports the idea of relating data between SharePoint Lists and the Agreement form fields.

By using workflows and mapping the list fields to the form fields, you can automatically pre-fill documents before sending, reducing the time for senders and/or signers to complete the form, and reducing the chance for miskeying the data.

Conversely, you can also create a mapping that extracts the form field data from a signed Agreement, to populate a SharePoint list.

The full guide for configuring template mappings can be found here.


Web form mapping

Similar to Template Mapping, Adobe Sign supports the idea of relating data between Adobe Sign web form agreements and SharePoint lists.

By mapping the web forms’ form fields to the SharePoint list columns, you can automatically route data to SharePoint, reducing the time and errors for miskeying the data.

The full guide for configuring web forms mappings can be found here.

Note:

Web form template mapping is only available to Adobe Sign for SharePoint Online v2.0+ installations.

Earlier versions must upgrade to gain access to this featrue.