Docusign eSignature - This User lacks sufficient permissions - salesforce

I am trying to setup the Docusign eSignature i nSFDC, through the Docusign APP Launcher and I am getting this error message whenever trying to create an Envelope template : "You are not authorized to access the envelope."
With the following API status in my Docusign API dashboard : ERROR: This User lacks sufficient permissions. :: Setting: userOverrideEnabled.
[.
Does anyone know what could be reason ?
Few more details :
I've seen in a post from Docusign that the error could come from having "Allow sender to download form data" unchecked. But it did not change anything in my case.
I'm admin in SFDC, in the Docusign App launcher in SFDC & the user who activated the integration. My email address is not registered as an Admin user in Docusign (im logging as some one else who is the admin in Docusign)
Best,
Lucas

To fix this issue your user has to be admin in DocuSign also.

Related

Error when try to use Docusign app in Salesforce1

I'm trying to use Docusign by Salesforce1, and when click on the Docusign button is occurring an error:
Error Domain=DSAPIManager Code=1004
"One or both of Username and Password are invalid."
UserInfo={
DS_API_MANAGER_ERRO_ID_KEY=USER_AUTHENTICATION_FAILED,
NSLocalizedDescription=One or Both of Username and Password are invalid.,
RKObjectMapperErrorObjectsKey=(
"[DSAPIErrorResponse{
message= One or both of Username or Password are invalid.;
errorCode=USER_AUTHENTICATION_FAILED; error = (null);
}]
")
}
This is occuring in a mobile IPhone and for not for all users.
In debug log doesn't appearing anything and in the Docusign log too.
We are appointing the correct Docusign URL (NA2,NA3).
The steps that the user are doing is:
Log-in into Docusign app > authenticate with user and password> after logged he goes to the Salesforce1 > select an opportunity > click on Docusign button > select a document and a recipient > click on Docusign button.
After this process the error occurs.
Could someone help me?
Thanks
Rafael
When you login to the DocuSign Mobile app they login to one user - but your Salesforce Org actually has them synced with another user.
Or your user has some recipient accounts that need to be closed probably a Force User Sync after in DocuSign eSignature for Salesforce.
The steps that the user are doing is: Log-in into Docusign app > authenticate with user and password> after logged he goes to the Salesforce1 > select an opportunity > click on Docusign button > select a document and a recipient > click on Docusign button. After this process the error occurs.
You would also need to make sure they choose the right server/environment for that first step.

Powerforms submit - getting Docusign Envelope ID

We are incorporating Powerforms into a Salesforce Community. When a user completes a Powerform, we need to execute a trigger to write back to Salesforce.
My questions are related to attaching the completed Docusign envelope to the related Salesforce record:
1) When we redirect from Powerforms, will we get the Docusign envelope ID?
2) If so, can we insert a Docusign envelope record in Salesforce with that ID with the standard AppExchange package to tie the envelope to the record in Salesforce from which the Powerform was initiated?
Any thoughts would be much appreciated.
Thanks,
Mike
If you're logged into DocuSign: Go To Admin>> Signing Settings>> In-Session Landing Pages
In-Session Landing Pages is used by Powerform to redirect the signer to the URL where you want Signer to redirects to. When Signer gets redirected then DocuSign populates URL like below:
{RedirectUrl}/?env={envelopeId}&pf={powerformId}&r={recipientId}
Alternatively and also recommended is to use DocuSign Connect, where you subscribe for the event like Envelope Completed or Recipient Signed etc, once event occurs then DocuSign will push an XML message to your configured listener with the envelope related details. This is a better approach because with redirect there is a risk of the customer closing the browser or browser getting crashed before browser hits your app URL.

Azure web application authentication

I have enabled azure web authentication in my web application and when unauthenticated users tried to access it, azure redirects it to https://example.azurewebsites.net/.auth/login/aad/callback page and shows the message "You do not have permission to view this directory or page."
For non-authorized users, instead of showing above message I want to redirect to another custom page to show another message.
Thanks in advance.
Thanks,
Tushar
Unfortunately , Azure AD doesn't support this feature for now.
I understand what you want to achieve. You can upvote this idea in this User Voice Page. Azure AD Team will review it.
Hope this helps!
ACS gives you error messages in encoded JSON like this
{"context":null,"httpReturnCode":401,"identityProvider":"Google","timeStamp":"2010-12-17 21:01:36Z","traceId":"16bba464-03b9-48c6-a248-9d16747b1515","errors":[{"errorCode":"ACS30000","errorMessage":"There was an error processing an OpenID sign-in response."},{"errorCode":"ACS50019","errorMessage":"Sign-in was canceled by the user."}]}
First you need to enable the "Error URL feature" in management portal, for your ACS namespace-> Edit Relying party-> Error URL.
You need a helper classes to decode the JSON. steps here
Configure anon access to them Error page.
With this you will have full control of the page, you can show the error message the way wants and brand the page to match the look and feel of your relying party web.

DocuSign Rest API login issue

I get JSON response {"errorCode": "USER_DOES_NOT_BELONG_TO_SPECIFIED_ACCOUNT", "message": "The specified User is not a member of the specified Account."} when we deployed application on a new SF sandbox with a different DocuSign account. Obviously I have changed the user/password and integration key for the new account. And after I make token request I get access token back, but I can not make post request due to above.
Can you guys help me understand why is this?
Users who want to send documents need a DocuSign account. It sounds like you've changed the username and password credentials however it is still pointing to the previous account hence the error. To resolve you need to update the integration to point to the new account.

SP Initiated SAML SSO gives error "Insufficient Privileges"

I have SAML service provider(SP) and I want to use salesforce as a Identity provider(IdP) with my SP.
I have setup domain, Created new Connected App with saml enabled with all required details. Then downloaded metadata and used this to register on SP.
Salesforce gives me IdP initiated Login Page URL. When i visit that, it works perfectly. It redirects to saleforce login, after that sends SAML response to SP. But when I visit SP and initiate login from there which redirects to salesforce page which gives following error.
Insufficient Privileges
You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary.
I had the same issue and got fixed. Here are helpful tips. 
You can check on the logs under 'Manage Users -> Identity Provider Event Log'. This could give reason for your error. I got a 'Error: User does not have access to this service provider' error 
For this, the user was not given permission. Even if the user is System Administrator, the access to Connected App is not given by default.  To give permission, go to 'Manager Users -> Users' and click edit on the user you are testing.Click profile name link .e.g System Administrator. This takes to profile page. You can scroll below to 'Connected App Access' and you would see that the access is not given. Give the access by clicking edit profile in the top of page. 

Resources