· 16 min read

Docusign Salesforce Integration: Setup, Templates and Pitfalls (2026 Guide)

Reps build a contract in Salesforce, download it, upload it to Docusign, retype the signer and then update the opportunity by hand. Docusign’s own Salesforce package removes every one of those steps: send from the record, merge Salesforce data into the document, and write the signed PDF and status back. Below: which Docusign app you need, how to set it up, the traps, and when a different tool or a custom build fits better.
A contract with a signature line and a CRM cloud with a deal card connected by arrows, illustrating a Docusign Salesforce integration
Connecting Docusign and Salesforce?Tell us which records you send from and what has to come back. We’ll map the envelope flow, set up or fix the Docusign package, and build and support a custom integration if you need one.
Plan my Docusign rollout

What a Docusign Salesforce integration should do

The goal is simple: a contract leaves Salesforce, gets signed, and the result lands back on the same record without anyone copying data. A working Salesforce Docusign integration does five jobs:

  • Send from the record. A button on the opportunity, quote, account or custom object opens a prepared envelope.
  • Fill the document. Customer name, address, amount and terms come from Salesforce fields, not from a rep’s typing.
  • Pick the right signers. Recipients come from the record: the opportunity’s contact, the account owner, a legal approver.
  • Track status. Sales and finance see sent, delivered, completed or declined without leaving Salesforce.
  • Write back. The signed PDF is saved to the record, and fields such as Stage update when the envelope is completed.

If you only need the first and last jobs for a handful of deals a month, the standard package with one template is enough. Volume, approvals and generated documents are what make the project bigger.

Which Docusign app for Salesforce you need

As of October 2026, Docusign ships its Salesforce apps in one managed package, Docusign Apps Launcher for Salesforce. According to Docusign’s installation guide, it includes eSignature for Salesforce, CLM for Salesforce and Gen for Salesforce, and installing any one of them installs the complete package.

Docusign’s admin guide also lists CLM Essentials and the eSignature Apex Toolkit as parts of it. What you can use depends on what your Docusign account is licensed for.

AppWhat it does in SalesforceWho needs it
eSignature for SalesforceEnvelope templates on any Salesforce object, Send with Docusign buttons, merge fields, status tracking, document and field writeback, a Flow actionEveryone who sends contracts for signature from Salesforce
Gen for SalesforceGenerates the contract itself from a Word-based template filled with Salesforce data (line items, pricing, terms), then hands it to eSignatureTeams that build quotes and contracts in Word today and paste data into them
CLM for SalesforceStores documents, runs approval and review workflows, generates documents and sends for signatureLegal and deal desks that need redlining, approvals and a contract repository
Apex ToolkitApex classes in the package for building and sending envelopes from code, without calling the REST API directlyDevelopers automating sends beyond what templates and Flow cover

One timing note: Docusign’s support center says Apps Launcher version 8.6.1 or higher is needed for Salesforce’s new connected app security requirements. Docusign set October 8, 2026 as the enforcement date for Apps Launcher and pushed upgrades to production orgs between September 5 and October 5, 2026.

On older versions, new users cannot authorize the app. Check your installed version under Installed Packages before you start.

Legacy eSignature for Salesforce vs. Apps Launcher

Some older orgs still have the first Docusign package installed, now called legacy Docusign eSignature for Salesforce. According to Docusign, it was de-listed from the marketplace in 2020, and its end-of-service date was October 16, 2026. Docusign’s migration article says the legacy app and its CPQ version cease to function and are no longer supported after that date.

If it is still in your org, move now. Docusign offers a migration tool for users, templates and records. After migrating, you remove the legacy permission sets, components and buttons before uninstalling.

Docusign also offers Docusign for Agentforce for sending agreements from pre-approved templates inside Agentforce. Its own page notes that some features are subject to future availability, so treat it as an add-on to the setup below, not a replacement.

What it costs on the Docusign side

Docusign’s eSignature pricing page lists, as of October 2026, Standard at $30 and Business Pro at $45 per user per month (on an annual commitment), each with 100 envelopes per user per year. In the plan comparison on the same page, “Integrations to Salesforce, Microsoft Dynamics, and Netsuite” and “Docusign Gen for Salesforce” are marked “Does not include” for the Personal, Standard and Business Pro plans, and the Enhanced plans show “Contact sales”. Ask Docusign sales which Enhanced plan covers your use, including Gen or CLM, before you build anything.

Your options compared

Docusign’s package is the default answer to “docusign integration with salesforce”, but not the only one. Here are four routes, from the package itself to your own build:

Docusign Apps LauncherAnother e-signature tool’s packageAutomation platformCustom API integration
ExampleseSignature for Salesforce, plus Gen or CLMAdobe Acrobat Sign for Salesforce, Dropbox Sign for Salesforce, PandaDoc for SalesforceFlow with the Send with Docusign action; Zapier, Make, Workato, MuleSoft for cross-system triggersDocusign eSignature REST API, Connect webhooks, Apex or middleware
What it coversTemplates, merge fields, buttons, status, writeback of documents and fieldsSimilar send-from-record pattern; depth varies by vendorTriggers: send when a stage changes, file when an envelope completesAnything the APIs expose, including signing in your own portal
DirectionSalesforce data into envelopes; status, documents and fields backMostly the same; PandaDoc advertises two-way syncOne-way per flowYour design
Cost levelEnhanced plan (“Contact sales” on Docusign’s pricing page); the package installs from AgentExchangeThat vendor’s plan; some require a higher tier or paid add-onPlatform subscription per task or flowBuild cost plus upkeep
Typical effortDays for one template; weeks for manyDays to weeksDays per flowWeeks to months
LimitsOne Salesforce org per Docusign account; writeback only to text and picklist fieldsAnother vendor, another set of mapping rulesNot a signing UI; still needs a Docusign planYou own retries, security and API changes

A few facts on the alternatives, from each vendor’s documentation as of October 2026:

  • Adobe says Acrobat Sign for Salesforce supports Professional, Enterprise, Unlimited, Developer and Performance editions.
  • Dropbox Sign’s integration needs a Dropbox Sign Enterprise plan with Salesforce enabled.
  • PandaDoc sells its Salesforce integration as a paid add-on for Business and Enterprise annual plans.

If you already standardized on one of them for other reasons, compare its Salesforce package before switching e-signature vendors.

Which option fits you?

Where your contracts are drafted and who reviews them decide most of this. Five questions on that, plus orgs and vendors, point you to eSignature alone, Gen, CLM or a custom build.

Which Docusign Salesforce setup fits?

How the data flows

Salesforce stays the system of record for the deal and the customer. Docusign is the system of record for the envelope: who signed what and when. The package moves data both ways at fixed points.

Data out at send, results back at each envelope event Salesforce (deal record) Opportunity or Quote Fields, contact roles, owner Send with Docusign Button or Flow action Docusign Status Envelope and recipient status Docusign (envelope record) Envelope template Documents, roles, merge fields Envelope Sent, delivered, completed Signers No Docusign account needed Merge data, recipients Status, PDF, writeback Into the envelope (at send) merge fields from the record and related objects; recipients from lookups, related lists, contacts or roles Back to Salesforce (on events) status records, signed PDF, certificate of completion, edited merge fields, field updates blocked by MFA for API logins or IP ranges
Salesforce data goes into the envelope when it is sent. Status, documents and field changes come back as the envelope moves, through server-to-server calls into Salesforce.

Template and field mapping: what goes where

In Apps Launcher, the mapping lives in the envelope template. You pick a Salesforce object as the data source, and everything else hangs off it. Start with this set:

SalesforceDocusignDirectionSystem of record
Opportunity, Quote or custom objectEnvelope template data sourceSalesforce → DocusignSalesforce
Fields on the record and related objects (account name, billing address, amount, term)Merge fields placed on the documentSalesforce → Docusign at sendSalesforce
Contact roles, owner, Created By, users or contactsRecipients (signer, copy, viewer) in signing orderSalesforce → Docusign at sendSalesforce
Files on the recordEnvelope documentsSalesforce → DocusignSalesforce
Merge fields marked “Allow Writeback” (text and picklist only)Values the signer editsDocusign → Salesforce on completionSalesforce, after signing
Stage or other fieldsField updates on envelope events (sent, completed, voided…)Docusign → SalesforceSalesforce
Files on the recordSigned document and certificate of completionDocusign → Salesforce on completionDocusign holds the original
Docusign Status and recipient status recordsEnvelope and recipient eventsDocusign → SalesforceDocusign

Docusign’s guide sets a few limits worth knowing before you design templates:

  • Merge fields can reach fields up to four levels of relationship from the source object, through lookups and child objects. Related list fields are out of reach; they need Docusign’s document custom fields instead.
  • Field updates allow up to five per envelope event type, and two updates for the same event cannot target the same field.
  • Reminders and expiration go up to 999 days.
  • On Salesforce mobile, Docusign’s guide describes sending with Quick Send and Send Now templates.

Two rules save most of the pain. Make Salesforce the only place where deal data is edited, and allow writeback only on fields a signer is genuinely meant to correct, like a billing address or PO number. Never let a signer write back the amount without a review step.

How to set it up, step by step

The sequence below follows Docusign’s eSignature for Salesforce admin guide, with the template design and the integration users settled before anything is installed. Docusign renames menus from time to time, so take the exact clicks from its current guide.

  1. Write down the flowWhich object you send from, which documents, who signs in what order and what must be written back. Add what happens in Salesforce when the envelope is completed or declined. This becomes your template design.
  2. Prepare a sandbox and a Docusign demo accountCreate a Docusign developer (demo) account for testing. Docusign’s guide connects sandboxes to demo accounts; production Salesforce connects to a production Docusign account.
  3. Create the integration usersOn the Salesforce side, use a generic user on a Standard User license with System Administrator access. A cloned standard profile with the permissions Docusign lists (API Enabled, Manage Users, Customize Application and others) also works. Set “Multi-Factor Authentication for API Logins” to off for that profile. On the Docusign side, a generic administrator nobody logs in with day to day. Docusign notes that the Salesforce Integration User license can’t be used, because those users can’t be added to the Docusign Administrator permission set.
  4. Install Apps LauncherFrom AgentExchange, sign in with production admin credentials even for a sandbox install, choose sandbox or production, and install for all users. Make sure the version is 8.6.1 or later.
  5. Connect the accountsOpen Docusign Apps Launcher, go through Docusign Setup and authorize with the Salesforce and Docusign integration users. For a demo account, choose “Log in to Demo Account” under advanced options. One Docusign account connects to one Salesforce org.
  6. Add usersGive each sender a Docusign user from the Docusign user management page (eSignature User or Administrator). Existing Docusign users can instead self-activate through the Docusign Login permission set. Don’t add people to the other Docusign permission sets by hand. Names and emails must match in both systems.
  7. Add components to layoutsPut the Envelope Status component (and Docusign Files if you use it) on the opportunity or quote page so users see progress.
  8. Build the first envelope templateIn the Envelope Templates tab: name and data source, documents, recipients, merge fields, field placement, then options (sending experience, reminders, expiration, document writeback and field updates). The last step adds a custom button to the layouts you choose.
  9. Automate if neededFor sends without a click, add the Send with Docusign action to a record-triggered Flow (Apps Launcher 6.1 or later) with the template ID and the record ID.
  10. Test real scenariosTry a normal deal, two signers in order and a signer who edits a writeback field. Add a declined envelope, a voided envelope, a contact with a Salesforce contact role and a send from console view. Check the status records, files and fields on the record after each.
  11. Pilot, then go to productionRun one sales team for a week or two, then repeat the setup in production. Templates don’t move by themselves: rebuild or clone them, and note that a later sandbox refresh points the sandbox back at production’s Docusign connection.

Built by Gilzor

Results we’ve shipped

70+products launched
98%delivered on time
85%clients come back
Art Scherbakov, Co-FounderAndrew Laminsky, CTOYuri Rudenya, Head of Mobile Development at GilzorAlena Timofeeva, Product Marketing Lead

Talk to the people who build it. Tell us about your project and get a free estimate of scope, timeline and cost.

See how we’d approach yours

Pitfalls and how to fix them

ProblemWhat happensFix
Status and writeback stopDocusign Status records don’t update and signed PDFs don’t arrive, while sending still worksTurn off MFA for API Logins on the affected profile, remove Login IP Ranges or allow Docusign’s IP ranges, as Docusign’s troubleshooting guide describes
Integration tied to a personDocusign says closing the Docusign integration user deletes envelope templates and custom merge fields and breaks send buttonsGeneric integration users on both sides, never deactivated; replace before closing; keep password login for at least one Docusign admin if you use SSO
Signer roles overwrittenRecipients pulled from a related list with a Salesforce contact role (Decision Maker, Evaluator) replace the Docusign role, and signature tags disappearDon’t mix Salesforce-role and Docusign-role recipients on one template, or clear the contact role, per Docusign’s fix
Sandbox sends to productionAfter a refresh, the sandbox’s Docusign connection, users and templates still point at productionAdd “disconnect, connect demo account, rebuild users, clone templates” to your sandbox refresh runbook
Duplicate envelopesIn Salesforce console view, switching tabs or refreshing after sending can send the envelope againTrain users to close the Docusign console tab after “Your envelope was sent!”
Writeback to the wrong field typeData writeback only supports text and picklist fields, so currency or date edits don’t landWrite to a text field and copy it with Flow after review, or don’t let signers edit those values
Users can’t authorizeOn Apps Launcher versions below 8.6.1, new users fail with a code_challenge error after Salesforce’s connected app changesUpgrade the package in sandbox, then production; reconnect if errors persist
Changed names or emailsA Salesforce or Docusign user’s name or email changes after activation, and the user can no longer sendKeep identities stable; update both systems together and re-activate if needed
Unlicensed sendersTeams expect everyone in Salesforce to send without a Docusign seatLicense senders, or use a System Sender with Apex Toolkit code, accepting that those users can’t correct or void envelopes

The Salesforce side of the integration user deserves its own design. Our guide to the Salesforce integration user covers licenses, profiles and permission sets for integrations in general.

Contract management software and Salesforce: Gen and CLM

eSignature only sends a document you already have. If reps still build quotes in Word, Docusign Gen for Salesforce fills a template with record data and line items. It puts a Generate button on the record, and the result goes to eSignature. Docusign’s documentation also says eSignature customers who buy Salesforce CPQ Plus receive a Docusign Gen license, subject to prerequisites such as a paid multi-user Docusign account.

When legal reviews contracts, the need is contract lifecycle management. Docusign CLM for Salesforce adds a repository, approval and review workflows and document generation, all launched from Salesforce.

Any contract management software Salesforce integration raises the same questions: which system holds the final contract, which fields come back to the opportunity, and who owns the template library. Settle those before choosing between Gen, CLM or a third-party CLM.

If finished contracts must also be filed in a document library, see our Salesforce SharePoint integration guide.

When a custom Docusign integration makes sense

The package covers sending from Salesforce records. A custom build on the Docusign eSignature REST API and Docusign Connect starts to pay off when:

  • Signing starts outside Salesforce: a customer portal, an onboarding app or a checkout, with results stored in Salesforce.
  • You need several Salesforce orgs on one Docusign setup, which the package doesn’t support.
  • Completed envelopes must trigger other systems too: billing, provisioning, an ERP or a document archive.
  • Writeback needs rules the template options can’t express, such as approval before a signer’s change lands.

A typical build has three parts:

  • Sender. A service creates envelopes from templates through the REST API.
  • Listener. A webhook listener receives Connect events. Docusign describes Connect as a webhook service that posts to a public HTTPS listener and retries failed deliveries with back-off for up to 15 days. Docusign prefers it over polling, which it limits to once every 15 minutes per envelope.
  • Writer. It updates Salesforce through its APIs idempotently, so a retried event never creates a second file or flips a stage twice.

Inside Salesforce, the Apex Toolkit is a lighter option for sends that stay in the org. Our Salesforce API integration guide covers the Salesforce side.

$2–10kSimple one-way custom integration
$10–40kTypical custom two-way sync with a CRM
15–25%Of the build cost per year to keep it running

The ranges are taken from our API integration cost guide, which also explains what makes a build land at the cheap or the expensive end. For connecting Salesforce to other systems in general, see the Salesforce integration guide.

Go-live checklist

Run through these before the first customer receives an envelope. Most items map to a pitfall described above, so an unchecked box is a known risk, not a formality.

Docusign Salesforce go-live

FAQ

Does Docusign integrate with Salesforce natively?
Yes. Docusign builds the integration itself and ships it as the Docusign Apps Launcher managed package on AppExchange (now AgentExchange). It contains Docusign eSignature for Salesforce, Gen and CLM; installing any one of them installs the whole package. You then connect your Docusign account on the Docusign Setup page inside Salesforce.
What is the difference between Docusign eSignature for Salesforce and Docusign Apps Launcher?
Apps Launcher is the package; eSignature for Salesforce is one app inside it, next to Gen (document generation) and CLM (contract lifecycle management). The older standalone package, now called legacy eSignature for Salesforce, was de-listed in 2020, and Docusign set its end-of-service date for October 16, 2026, after which Docusign says it ceases to function. Every setup should now run on Apps Launcher.
How do I send a Docusign envelope from a Salesforce opportunity?
Create an envelope template in the Docusign Envelope Templates tab with Opportunity as the data source, add documents, recipients and merge fields, choose the writeback options, and let the wizard add a custom button to the opportunity page layout. Users with Docusign access then click the button on the record. You can also send automatically with the Send with Docusign action in Salesforce Flow.
Why is Docusign not updating Salesforce after signing?
According to Docusign’s troubleshooting guide, the two usual causes are Multi-Factor Authentication for API Logins enabled on the user’s profile and Login IP Ranges that block Docusign’s servers. Both stop the server-to-server calls that update status records and write documents and fields back. Also check that the fields you write to are text or picklist fields, the only types data writeback supports.
Can I test Docusign in a Salesforce sandbox?
Yes. Install Apps Launcher in the sandbox and connect it to a Docusign demo (developer) account, not your production account. After a sandbox refresh or clone, the Docusign connection, users and templates still point at production, so Docusign’s guide says to disconnect, connect the demo account, rebuild users and clone templates again.
Does every Salesforce user need a Docusign license?
Every user who sends through the standard buttons needs a Docusign user, created from the Docusign user management page or the Docusign Login permission set. Signers never need a Docusign account. For users without Docusign seats, Docusign supports a System Sender, but it requires Apex code with the Docusign Apex Toolkit, and those users cannot view, correct, resend or void what they sent.

Where Gilzor fits

A Docusign rollout touches sales, legal and the Salesforce admin, and the package only works once all three agree on the contract flow. As a software development company with a team in Poland and Cyprus, Gilzor builds and maintains Salesforce integrations; for Docusign, that starts with mapping the flow together with sales and legal.

Then we set up or clean up the Docusign package and its templates, or build a custom integration on the Docusign and Salesforce APIs, and stay on to support it after launch. The Salesforce integration services page shows how such projects are scoped.

No sales pitch

Get a straight answer for your project

Tell us what you’re building. We’ll reply with options, a rough cost and timeline. If we’re not the right fit, we’ll say so.

Next, a few optional questions so the first call is useful. We use your details only to reply to your request. Privacy Policy

Andrew Laminsky
Written byAndrew Laminsky

CTO of Gilzor. Responsible for architecture and the engineering standards our teams work by.

LinkedIn →

Gilzor · Web Development partner

Need a team for your web product?

95%referred by business partners
70+successful launches
85%repeat business
98%delivered on time

The team behind them

Art Scherbakov
Art ScherbakovCo-Founder
Andrew Laminsky
Andrew LaminskyCTOLinkedIn
Yuri Rudenya
Yuri RudenyaHead of Mobile Development at GilzorLinkedIn
Alena Timofeeva
Alena TimofeevaProduct Marketing LeadLinkedIn
Tell us what you’re buildingOptions, a rough cost and timeline for your project. No commitment.

More insights