Authentication Failed You Do Not Have the Proper Cookie Please Go to Onid and Try Again

This error bulletin indicates that the user is attempting an activity that is non permitted due to an dominance issue on the Adobe Sign side of the equation.

There are two common scenarios where this error is generated:

• During installation of the package into the Salesforce organisation
• When a sender outset sends an agreement from the Salesforce integration

Adobe Sign for Salesforce (All versions)

During the installation processes, there are three elements that can be the root crusade of the access_denied error:

• The userID in Adobe Sign is incorrect or restricted
• The Adobe Sign business relationship (that the userID is in) is not properly configured every bit an enterprise account
• The channel that the business relationship is in is not right

Adobe Sign and Salesforce sync the user in each organization by the electronic mail address (not the Username value, which tin can be different in Salesforce).

Trial accounts and Sandboxes can hands create situations where the bodily userIDs that are connecting are different than the intended IDs.

Always start troubleshooting access errors past ensuring the userIDs involved are the ones y'all expect, and that they are correctly provisioned with administrative authorization.

Emails must friction match, and you must be an account admin

The email value in your Salesforce profile dictates the userID that is authenticating the process on the Adobe Sign side.

• Open your Salesforce profile and copy your email value to a notepad

• Log into Adobe Sign using the same email address
  • If you cannot log in, click the I forgot my password link and institute a new password so that you can
  • If you take whatsoever trouble resetting your password, or you withal cannot log in once the password is reset, contact your success director to assess your user in the Adobe Sign system
• Click the Account tab and select Users from the left rail of options
  • If y'all do not have an Account tab, and so yous are not an business relationship admin. Contact some other Adobe Sign admin (or your success manager) to have your authorisation elevated
• Double click the user (that matches your email address) to open the user properties

• Verify that you are looking at the correct user by checking the electronic mail value
• Verify that the user is enabled equally an account administrator

If you lot are not enabled as an account administrator, you lot must exist elevated before you can complete the linkage betwixt Adobe Sign and Salesforce.

Only an account admin can drag your privilege in the system. Contact another Adobe Sign admin (or your success manager) to accept your system privilege enabled at the account level.

Annotation:

Generally speaking, Support and Success agents are only allowed to hash out and dispense the account with a designated account admin.

If you must troubleshoot beyond the user, you all the same should exist an business relationship admin in the system so you can freely engage with the support/success teams.

Your admin userID must be in an account with an enterprise level service plan.

To verify this:

• Click the Account tab
• Select the Personal Preferences selection from the left runway
• Select the My Contour carte du jour selection

The service plan is listed at the superlative-right of the My Profile window:

If your Adobe Sign plan is non Enterprise (or Enterprise Trial), and then either your userID is in the wrong account, or your account hasn't been upgraded to enterprise yet.

Contact your success director with your account admin email:

• Bespeak that you are installing the Salesforce package
• Provide the email address of your SFDC admin
• Indicate that you logged in to Adobe Sign and the business relationship your user is in does non appear to be an Enterprise plan
• Request that the agent also verify that the account is in the proper channel

If the user checks out, and your account is an Enterprise plan, and so odds are proficient that your account is in the wrong aqueduct.

Channels grant types of authority to the accounts within their telescopic. Salesforce requires admission to several API settings that are enabled by channel configuration.

Only support or your success director can right a aqueduct issue. When yous contact support/success, please:

• Contact the squad from the email address that corresponds to the business relationship admin in Adobe Sign
• Inform them that y'all have checked the user in the system, and that the service plan is correct
• Provide the error message and what yous were doing when the mistake was triggered

Users of the Adobe Sign for Salesforce integration run into access issues when:

• The user isn't in the correct Adobe Sign business relationship
• The user has had their Sending authority revoked

Checking the user in the Adobe Sign system should rapidly identify the root upshot.

Only an account or group admin will exist able to bank check the userID in Adobe Sign.

If you are not an admin, you lot will need to relay this procedure to someone that has the say-so to review the users in Adobe Sign.

First, verify the user's email in Salesforce.

• Log in to Salesforce as an admin
• Navigate to:Home > Administration > Users > Users
• Click the Full Proper name link of the user in question to open the user profile
• Re-create the Email value to a notepad
  • Do not capture the Username value. The link to Adobe Sign is based on the E-mail value
    

To verify a user in Adobe Sign:

• Log in to Adobe Sign as an admin (account or group)
• Navigate to the Users tab: Business relationship > Users
• Employ the Search field to search for the users email address
  • This email value must lucifer the Salesforce electronic mail value, or you are looking at the wrong userID
  • If you practice not find the user at all, and so the user is likely in another group or account (peradventure a trial)
    • You lot tin effort to create the user to motility the user to your group/account
    • If you cannot create the user, contact your success director and provide them with the email address of the user

If you find the user, double click the row that has the same e-mail value as the Salesforce user. This opens the user properties.

• Verify the Status of the user is Active
  • If the status is Inactive, the user must be re-activated
  • If the status is whatsoever other value, the user will demand to reset their password
• Verify that the user tin can send documents
  • If the user is not enabled for sending documents, enable them

Integrations such every bit Adobe Sign for Salesforce can only be installed with an Adobe Sign enterprise or enterprise trial service program.

Developer accounts can install integrations, but must be moved to the correct channel by support/success before they tin exist activated.

robertsoperepien.blogspot.com

Source: https://helpx.adobe.com/sign/kb/error-in-salesforce-adobe-sign-authentication-error-access-denied.html

Share this post