Docusign Salesforce Integration: Setup, Templates and Pitfalls (2026 Guide)

In this article
- The official route is Docusign eSignature for Salesforce, part of the Docusign Apps Launcher managed package. Installing it from AppExchange (now AgentExchange) also installs Docusign Gen and Docusign CLM, which you switch on only if you license them.
- You build envelope templates on a Salesforce object (an opportunity, a quote, a custom object): documents, recipients from lookups or related lists, merge fields and a Send with Docusign button. Status is tracked on Docusign Status records, and signed PDFs and field updates are written back to the record.
- Most failures come from setup, not the product: an integration user tied to a person, MFA for API logins or login IP ranges blocking writeback, contact roles overriding signer roles, and sandboxes still pointing at production.
- Alternatives: Adobe Acrobat Sign, Dropbox Sign or PandaDoc each have their own Salesforce package. A custom integration on the Docusign eSignature REST API and Connect webhooks fits portals, several orgs or signing that starts outside Salesforce.
Jump to
- What a Docusign Salesforce integration should do
- Which Docusign app for Salesforce you need
- Your options compared
- How the data flows
- Template and field mapping: what goes where
- How to set it up, step by step
- Pitfalls and how to fix them
- Contract management software and Salesforce: Gen and CLM
- When a custom Docusign integration makes sense
- Go-live checklist
- Where Gilzor fits
What a Docusign Salesforce integration should do
The goal is simple: a contract leaves Salesforce, gets signed, and the result lands back on the same record without anyone copying data. A working Salesforce Docusign integration does five jobs:
- Send from the record. A button on the opportunity, quote, account or custom object opens a prepared envelope.
- Fill the document. Customer name, address, amount and terms come from Salesforce fields, not from a rep’s typing.
- Pick the right signers. Recipients come from the record: the opportunity’s contact, the account owner, a legal approver.
- Track status. Sales and finance see sent, delivered, completed or declined without leaving Salesforce.
- Write back. The signed PDF is saved to the record, and fields such as Stage update when the envelope is completed.
If you only need the first and last jobs for a handful of deals a month, the standard package with one template is enough. Volume, approvals and generated documents are what make the project bigger.
Which Docusign app for Salesforce you need
As of October 2026, Docusign ships its Salesforce apps in one managed package, Docusign Apps Launcher for Salesforce. According to Docusign’s installation guide, it includes eSignature for Salesforce, CLM for Salesforce and Gen for Salesforce, and installing any one of them installs the complete package.
Docusign’s admin guide also lists CLM Essentials and the eSignature Apex Toolkit as parts of it. What you can use depends on what your Docusign account is licensed for.
| App | What it does in Salesforce | Who needs it |
|---|---|---|
| eSignature for Salesforce | Envelope templates on any Salesforce object, Send with Docusign buttons, merge fields, status tracking, document and field writeback, a Flow action | Everyone who sends contracts for signature from Salesforce |
| Gen for Salesforce | Generates the contract itself from a Word-based template filled with Salesforce data (line items, pricing, terms), then hands it to eSignature | Teams that build quotes and contracts in Word today and paste data into them |
| CLM for Salesforce | Stores documents, runs approval and review workflows, generates documents and sends for signature | Legal and deal desks that need redlining, approvals and a contract repository |
| Apex Toolkit | Apex classes in the package for building and sending envelopes from code, without calling the REST API directly | Developers automating sends beyond what templates and Flow cover |
One timing note: Docusign’s support center says Apps Launcher version 8.6.1 or higher is needed for Salesforce’s new connected app security requirements. Docusign set October 8, 2026 as the enforcement date for Apps Launcher and pushed upgrades to production orgs between September 5 and October 5, 2026.
On older versions, new users cannot authorize the app. Check your installed version under Installed Packages before you start.
Legacy eSignature for Salesforce vs. Apps Launcher
Some older orgs still have the first Docusign package installed, now called legacy Docusign eSignature for Salesforce. According to Docusign, it was de-listed from the marketplace in 2020, and its end-of-service date was October 16, 2026. Docusign’s migration article says the legacy app and its CPQ version cease to function and are no longer supported after that date.
If it is still in your org, move now. Docusign offers a migration tool for users, templates and records. After migrating, you remove the legacy permission sets, components and buttons before uninstalling.
Docusign also offers Docusign for Agentforce for sending agreements from pre-approved templates inside Agentforce. Its own page notes that some features are subject to future availability, so treat it as an add-on to the setup below, not a replacement.
What it costs on the Docusign side
Docusign’s eSignature pricing page lists, as of October 2026, Standard at $30 and Business Pro at $45 per user per month (on an annual commitment), each with 100 envelopes per user per year. In the plan comparison on the same page, “Integrations to Salesforce, Microsoft Dynamics, and Netsuite” and “Docusign Gen for Salesforce” are marked “Does not include” for the Personal, Standard and Business Pro plans, and the Enhanced plans show “Contact sales”. Ask Docusign sales which Enhanced plan covers your use, including Gen or CLM, before you build anything.
Your options compared
Docusign’s package is the default answer to “docusign integration with salesforce”, but not the only one. Here are four routes, from the package itself to your own build:
| Docusign Apps Launcher | Another e-signature tool’s package | Automation platform | Custom API integration | |
|---|---|---|---|---|
| Examples | eSignature for Salesforce, plus Gen or CLM | Adobe Acrobat Sign for Salesforce, Dropbox Sign for Salesforce, PandaDoc for Salesforce | Flow with the Send with Docusign action; Zapier, Make, Workato, MuleSoft for cross-system triggers | Docusign eSignature REST API, Connect webhooks, Apex or middleware |
| What it covers | Templates, merge fields, buttons, status, writeback of documents and fields | Similar send-from-record pattern; depth varies by vendor | Triggers: send when a stage changes, file when an envelope completes | Anything the APIs expose, including signing in your own portal |
| Direction | Salesforce data into envelopes; status, documents and fields back | Mostly the same; PandaDoc advertises two-way sync | One-way per flow | Your design |
| Cost level | Enhanced plan (“Contact sales” on Docusign’s pricing page); the package installs from AgentExchange | That vendor’s plan; some require a higher tier or paid add-on | Platform subscription per task or flow | Build cost plus upkeep |
| Typical effort | Days for one template; weeks for many | Days to weeks | Days per flow | Weeks to months |
| Limits | One Salesforce org per Docusign account; writeback only to text and picklist fields | Another vendor, another set of mapping rules | Not a signing UI; still needs a Docusign plan | You own retries, security and API changes |
A few facts on the alternatives, from each vendor’s documentation as of October 2026:
- Adobe says Acrobat Sign for Salesforce supports Professional, Enterprise, Unlimited, Developer and Performance editions.
- Dropbox Sign’s integration needs a Dropbox Sign Enterprise plan with Salesforce enabled.
- PandaDoc sells its Salesforce integration as a paid add-on for Business and Enterprise annual plans.
If you already standardized on one of them for other reasons, compare its Salesforce package before switching e-signature vendors.
Which option fits you?
Where your contracts are drafted and who reviews them decide most of this. Five questions on that, plus orgs and vendors, point you to eSignature alone, Gen, CLM or a custom build.
Which Docusign Salesforce setup fits?
How the data flows
Salesforce stays the system of record for the deal and the customer. Docusign is the system of record for the envelope: who signed what and when. The package moves data both ways at fixed points.
Template and field mapping: what goes where
In Apps Launcher, the mapping lives in the envelope template. You pick a Salesforce object as the data source, and everything else hangs off it. Start with this set:
| Salesforce | Docusign | Direction | System of record |
|---|---|---|---|
| Opportunity, Quote or custom object | Envelope template data source | Salesforce → Docusign | Salesforce |
| Fields on the record and related objects (account name, billing address, amount, term) | Merge fields placed on the document | Salesforce → Docusign at send | Salesforce |
| Contact roles, owner, Created By, users or contacts | Recipients (signer, copy, viewer) in signing order | Salesforce → Docusign at send | Salesforce |
| Files on the record | Envelope documents | Salesforce → Docusign | Salesforce |
| Merge fields marked “Allow Writeback” (text and picklist only) | Values the signer edits | Docusign → Salesforce on completion | Salesforce, after signing |
| Stage or other fields | Field updates on envelope events (sent, completed, voided…) | Docusign → Salesforce | Salesforce |
| Files on the record | Signed document and certificate of completion | Docusign → Salesforce on completion | Docusign holds the original |
| Docusign Status and recipient status records | Envelope and recipient events | Docusign → Salesforce | Docusign |
Docusign’s guide sets a few limits worth knowing before you design templates:
- Merge fields can reach fields up to four levels of relationship from the source object, through lookups and child objects. Related list fields are out of reach; they need Docusign’s document custom fields instead.
- Field updates allow up to five per envelope event type, and two updates for the same event cannot target the same field.
- Reminders and expiration go up to 999 days.
- On Salesforce mobile, Docusign’s guide describes sending with Quick Send and Send Now templates.
Two rules save most of the pain. Make Salesforce the only place where deal data is edited, and allow writeback only on fields a signer is genuinely meant to correct, like a billing address or PO number. Never let a signer write back the amount without a review step.
How to set it up, step by step
The sequence below follows Docusign’s eSignature for Salesforce admin guide, with the template design and the integration users settled before anything is installed. Docusign renames menus from time to time, so take the exact clicks from its current guide.
- Write down the flowWhich object you send from, which documents, who signs in what order and what must be written back. Add what happens in Salesforce when the envelope is completed or declined. This becomes your template design.
- Prepare a sandbox and a Docusign demo accountCreate a Docusign developer (demo) account for testing. Docusign’s guide connects sandboxes to demo accounts; production Salesforce connects to a production Docusign account.
- Create the integration usersOn the Salesforce side, use a generic user on a Standard User license with System Administrator access. A cloned standard profile with the permissions Docusign lists (API Enabled, Manage Users, Customize Application and others) also works. Set “Multi-Factor Authentication for API Logins” to off for that profile. On the Docusign side, a generic administrator nobody logs in with day to day. Docusign notes that the Salesforce Integration User license can’t be used, because those users can’t be added to the Docusign Administrator permission set.
- Install Apps LauncherFrom AgentExchange, sign in with production admin credentials even for a sandbox install, choose sandbox or production, and install for all users. Make sure the version is 8.6.1 or later.
- Connect the accountsOpen Docusign Apps Launcher, go through Docusign Setup and authorize with the Salesforce and Docusign integration users. For a demo account, choose “Log in to Demo Account” under advanced options. One Docusign account connects to one Salesforce org.
- Add usersGive each sender a Docusign user from the Docusign user management page (eSignature User or Administrator). Existing Docusign users can instead self-activate through the Docusign Login permission set. Don’t add people to the other Docusign permission sets by hand. Names and emails must match in both systems.
- Add components to layoutsPut the Envelope Status component (and Docusign Files if you use it) on the opportunity or quote page so users see progress.
- Build the first envelope templateIn the Envelope Templates tab: name and data source, documents, recipients, merge fields, field placement, then options (sending experience, reminders, expiration, document writeback and field updates). The last step adds a custom button to the layouts you choose.
- Automate if neededFor sends without a click, add the Send with Docusign action to a record-triggered Flow (Apps Launcher 6.1 or later) with the template ID and the record ID.
- Test real scenariosTry a normal deal, two signers in order and a signer who edits a writeback field. Add a declined envelope, a voided envelope, a contact with a Salesforce contact role and a send from console view. Check the status records, files and fields on the record after each.
- Pilot, then go to productionRun one sales team for a week or two, then repeat the setup in production. Templates don’t move by themselves: rebuild or clone them, and note that a later sandbox refresh points the sandbox back at production’s Docusign connection.
Built by Gilzor
Results we’ve shipped




Talk to the people who build it. Tell us about your project and get a free estimate of scope, timeline and cost.
Pitfalls and how to fix them
| Problem | What happens | Fix |
|---|---|---|
| Status and writeback stop | Docusign Status records don’t update and signed PDFs don’t arrive, while sending still works | Turn off MFA for API Logins on the affected profile, remove Login IP Ranges or allow Docusign’s IP ranges, as Docusign’s troubleshooting guide describes |
| Integration tied to a person | Docusign says closing the Docusign integration user deletes envelope templates and custom merge fields and breaks send buttons | Generic integration users on both sides, never deactivated; replace before closing; keep password login for at least one Docusign admin if you use SSO |
| Signer roles overwritten | Recipients pulled from a related list with a Salesforce contact role (Decision Maker, Evaluator) replace the Docusign role, and signature tags disappear | Don’t mix Salesforce-role and Docusign-role recipients on one template, or clear the contact role, per Docusign’s fix |
| Sandbox sends to production | After a refresh, the sandbox’s Docusign connection, users and templates still point at production | Add “disconnect, connect demo account, rebuild users, clone templates” to your sandbox refresh runbook |
| Duplicate envelopes | In Salesforce console view, switching tabs or refreshing after sending can send the envelope again | Train users to close the Docusign console tab after “Your envelope was sent!” |
| Writeback to the wrong field type | Data writeback only supports text and picklist fields, so currency or date edits don’t land | Write to a text field and copy it with Flow after review, or don’t let signers edit those values |
| Users can’t authorize | On Apps Launcher versions below 8.6.1, new users fail with a code_challenge error after Salesforce’s connected app changes | Upgrade the package in sandbox, then production; reconnect if errors persist |
| Changed names or emails | A Salesforce or Docusign user’s name or email changes after activation, and the user can no longer send | Keep identities stable; update both systems together and re-activate if needed |
| Unlicensed senders | Teams expect everyone in Salesforce to send without a Docusign seat | License senders, or use a System Sender with Apex Toolkit code, accepting that those users can’t correct or void envelopes |
The Salesforce side of the integration user deserves its own design. Our guide to the Salesforce integration user covers licenses, profiles and permission sets for integrations in general.
Contract management software and Salesforce: Gen and CLM
eSignature only sends a document you already have. If reps still build quotes in Word, Docusign Gen for Salesforce fills a template with record data and line items. It puts a Generate button on the record, and the result goes to eSignature. Docusign’s documentation also says eSignature customers who buy Salesforce CPQ Plus receive a Docusign Gen license, subject to prerequisites such as a paid multi-user Docusign account.
When legal reviews contracts, the need is contract lifecycle management. Docusign CLM for Salesforce adds a repository, approval and review workflows and document generation, all launched from Salesforce.
Any contract management software Salesforce integration raises the same questions: which system holds the final contract, which fields come back to the opportunity, and who owns the template library. Settle those before choosing between Gen, CLM or a third-party CLM.
If finished contracts must also be filed in a document library, see our Salesforce SharePoint integration guide.
When a custom Docusign integration makes sense
The package covers sending from Salesforce records. A custom build on the Docusign eSignature REST API and Docusign Connect starts to pay off when:
- Signing starts outside Salesforce: a customer portal, an onboarding app or a checkout, with results stored in Salesforce.
- You need several Salesforce orgs on one Docusign setup, which the package doesn’t support.
- Completed envelopes must trigger other systems too: billing, provisioning, an ERP or a document archive.
- Writeback needs rules the template options can’t express, such as approval before a signer’s change lands.
A typical build has three parts:
- Sender. A service creates envelopes from templates through the REST API.
- Listener. A webhook listener receives Connect events. Docusign describes Connect as a webhook service that posts to a public HTTPS listener and retries failed deliveries with back-off for up to 15 days. Docusign prefers it over polling, which it limits to once every 15 minutes per envelope.
- Writer. It updates Salesforce through its APIs idempotently, so a retried event never creates a second file or flips a stage twice.
Inside Salesforce, the Apex Toolkit is a lighter option for sends that stay in the org. Our Salesforce API integration guide covers the Salesforce side.
The ranges are taken from our API integration cost guide, which also explains what makes a build land at the cheap or the expensive end. For connecting Salesforce to other systems in general, see the Salesforce integration guide.
Go-live checklist
Run through these before the first customer receives an envelope. Most items map to a pitfall described above, so an unchecked box is a known risk, not a formality.
Docusign Salesforce go-live
FAQ
Does Docusign integrate with Salesforce natively?
What is the difference between Docusign eSignature for Salesforce and Docusign Apps Launcher?
How do I send a Docusign envelope from a Salesforce opportunity?
Why is Docusign not updating Salesforce after signing?
Can I test Docusign in a Salesforce sandbox?
Does every Salesforce user need a Docusign license?
Where Gilzor fits
A Docusign rollout touches sales, legal and the Salesforce admin, and the package only works once all three agree on the contract flow. As a software development company with a team in Poland and Cyprus, Gilzor builds and maintains Salesforce integrations; for Docusign, that starts with mapping the flow together with sales and legal.
Then we set up or clean up the Docusign package and its templates, or build a custom integration on the Docusign and Salesforce APIs, and stay on to support it after launch. The Salesforce integration services page shows how such projects are scoped.
No sales pitch
Get a straight answer for your project
Tell us what you’re building. We’ll reply with options, a rough cost and timeline. If we’re not the right fit, we’ll say so.

CTO of Gilzor. Responsible for architecture and the engineering standards our teams work by.
LinkedIn →Gilzor · Web Development partner
Need a team for your web product?
Services
Web DevelopmentCustom websites and web apps — front-end, back-end, launch and support.→By company type
Selected projects






The team behind them





