Tuesday, June 23, 2026

SharePoint Integration with Adobe Workfront

SharePoint Integration with Adobe Workfront — Step-by-Step Setup Guide

Who is this for? Anyone setting up the legacy SharePoint integration in Workfront from scratch. No prior experience needed — follow every step exactly as written.


What You Will Need Before You Start

Item Where to Get It
SharePoint Online admin or site admin access Your IT/Microsoft 365 admin
Adobe Workfront admin access Your Workfront administrator
Your SharePoint tenant URL Example: https://[your-tenant].sharepoint.com

Overview of the 3 Phases

Phase 1 → Go to SharePoint → Register the App → Get Client ID & Client Secret
Phase 2 → Go to Workfront → Fill in the Integration Form
Phase 3 → Verify & Test

Phase 1: Generate Client ID and Client Secret in SharePoint

This is the most important phase. You will visit a special SharePoint page to create an "App Registration" that gives Workfront permission to talk to SharePoint.


Step 1 — Open the App Registration Page in SharePoint

  1. Open your browser (Chrome or Edge recommended).

  2. In the address bar, type your SharePoint URL and add /_layouts/15/appregnew.aspx at the end.

    Example:

    https://[your-tenant].sharepoint.com/_layouts/15/appregnew.aspx
    

    Replace [your-tenant] with your actual SharePoint domain name.

  3. Press Enter. You will see a form titled "App Information" or "New App".

    ⚠️ If you see an error like "Sorry, you don't have access" — contact your Microsoft 365 Global Administrator. Only tenant admins can access this page.


Step 2 — Fill in the App Registration Form

You will see fields on the page. Fill them in exactly as described below:

Field What to Enter
Client Id Click the Generate button next to this field. A GUID (long code) will auto-fill.
Client Secret Click the Generate button next to this field. A secret code will auto-fill.
Title Type any name. Example: Workfront SharePoint App
App Domain Type exactly: my.workfront.com
Redirect URI Type exactly: https://oauth.my.workfront.com/oauth2/redirect

📋 CRITICAL: Before clicking Create, copy and save the Client ID and Client Secret to Notepad or a secure location. You will NOT be able to see the Client Secret again after leaving this page.


Step 3 — Click Create

  1. After filling all fields, scroll down and click Create.
  2. You will see a confirmation message: "The app identifier has been successfully created."
  3. The page will also display the Client ID and Client Secret one final time — copy both values now if you haven't already.

Step 4 — Grant Permissions to the App in SharePoint

Choose one of the three permission models below based on your organisation's requirement.


🔵 Option A — Tenant-Wide Access (All Site Collections)

Use this when Workfront needs access to all site collections across the entire SharePoint tenant.

URL to open:

https://[your-tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx

⚠️ Note the -admin in the URL. Without it, tenant-scoped permissions will NOT be granted.

Permission XML to paste:

<AppPermissionRequests AllowAppOnlyPolicy="true">
  <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
</AppPermissionRequests>

Steps:

  1. Open the URL above.
  2. Paste the Client ID in the App Id field → click Lookup.
  3. Paste the XML above into the Permission Request XML field.
  4. Click Create → click Trust It in the popup.

✅ The app now has access to all site collections in the tenant.


🟡 Option B — Single Site Collection Access

Use this when Workfront should access only one specific site collection.

URL to open (replace [your-tenant] and [SiteName] with actual values):

https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx

⚠️ Open this URL from within the target site collection — NOT from the admin URL.

Permission XML to paste:

<AppPermissionRequests AllowAppOnlyPolicy="true">
  <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" />
</AppPermissionRequests>

Steps:

  1. Open the site-specific URL above.
  2. Paste the Client ID in the App Id field → click Lookup.
  3. Paste the XML above into the Permission Request XML field.
  4. Click Create → click Trust It in the popup.

✅ The app now has access to only that specific site collection.


🟢 Option C — Multiple Specific Site Collections

Use this when Workfront needs access to more than one site collection, but not all.

There is no single XML that can list multiple site collections. You must repeat Option B for each site collection individually.

For each site collection you want to add:

  1. Open:
    https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx
    
  2. Paste the Client ID → click Lookup.
  3. Paste this XML:
    <AppPermissionRequests AllowAppOnlyPolicy="true">  <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" /></AppPermissionRequests>
    
  4. Click Create → click Trust It.
  5. Repeat from step 1 for each additional site collection.

✅ Each site collection is granted independently using the same Client ID.


Comparison Table — Which Option Should You Use?

Option A — Tenant Option B — Single Site Option C — Multiple Sites
Access Scope All site collections One site collection Selected site collections
URL Used -admin.sharepoint.com appinv.aspx sites/[Name] appinv.aspx sites/[Name] appinv.aspx (repeated)
XML Scope Value content/tenant content/sitecollection content/sitecollection
Steps Required One time One time Once per site
Best For Full enterprise rollout Single team or department Controlled multi-team rollout
Security Level Broad Tight Balanced

Phase 2: Configure the Integration in Adobe Workfront

Now you will go to Workfront and fill in the form.


Step 5 — Log into Workfront as Administrator

  1. Open your browser and go to your Workfront URL:
    https://[your-tenant].my.workfront.com
    
  2. Log in with your Workfront administrator credentials.

Step 6 — Navigate to SharePoint Integration Settings

  1. Click the Main Menu icon (grid/waffle icon) in the top-right corner of Workfront.

  2. Click Setup (gear icon).

  3. In the left panel, click Documents.

  4. Under Documents, click SharePoint Integration.

  5. Click the + Add SharePoint Integration button (or New Integration if shown).

    The SharePoint Integration form will open — this is the form shown in the screenshots.


Step 7 — Fill in the SharePoint Integration Form

The form has 4 sections in the left menu. Fill them in order:


Section 1: SharePoint Instance Name

Field What to Enter
Name A friendly label for this integration. Example: SharePoint Online Integration

Click Next or go to the next section.


Section 2: SharePoint Info

Field What to Enter
SharePoint Host Instance Your SharePoint URL without https://. Example: [your-tenant].sharepoint.com
Azure Access Domain Your SharePoint URL without https://. Example: [your-tenant].sharepoint.com
Site Collections Authentication Type [your-tenant].sharepoint.com (same as above)

Section 3: Connection Info

This is where you enter the credentials from Phase 1.

Field What to Enter
SharePoint Client ID Paste the Client ID you copied in Step 2
SharePoint Client Secret Paste the Client Secret you copied in Step 2
Workfront SharePoint AppDomain Pre-filled: my.workfront.comdo not change
Workfront SharePoint Redirect URI Pre-filled: https://oauth.my.workfront.com/oauth2/redirectdo not change

⚠️ Important: The Client Secret must be exactly 44 characters long. If it's shorter, go back to the SharePoint appregnew.aspx page and generate a new one. You may need to try 2–3 times until a 44-character secret is generated.


Section 4: Visible Site Collections

This section lists the SharePoint site collections that will be accessible inside Workfront.

  • If you chose Option A (tenant-wide) — leave this as default; all sites will appear automatically.
  • If you chose Option B or C (specific sites) — add only those site collection URLs here to match the permissions you granted.

Step 8 — Click Confirm

  1. Review all fields one more time.
  2. Click the Confirm button (blue button, bottom-right).
  3. Workfront will test the connection. If successful, the integration will be saved.

Step 9 — Enable the Integration in Cloud Providers Settings

  1. Go back to Setup → Documents → Cloud Providers.
  2. Make sure both SharePoint and SharePoint (Graph API) checkboxes are enabled (checked).
  3. Click Save.

Phase 3: Verify the Integration

Step 10 — Test from a Document Area

  1. Go to any Project or Task in Workfront.

  2. Click the Documents tab.

  3. Click Add New → From SharePoint.

  4. You should see your SharePoint sites listed and be able to browse folders.

    ✅ If you can browse SharePoint files — the integration is working correctly!


Troubleshooting

Problem Fix
"App not trusted" error Go back to appinv.aspx and click Trust It again
Client Secret not accepted / 44 character error Go to appregnew.aspx, generate a new Client Secret, and update it in Workfront
"Sorry, only tenant administrators can access" Ask your Microsoft 365 Global Admin to perform Steps 1–4
Cannot see SharePoint sites in Workfront Ensure your account has View access to those site collections in SharePoint
Previously linked documents not accessible A user with SharePoint access must re-link the folder from the Documents tab
Site not visible after Option B/C Confirm the appinv.aspx step was completed on that specific site URL, not the admin URL

Quick Reference — Values Summary

Value Where It Comes From
Client ID Generated at appregnew.aspx (SharePoint)
Client Secret Generated at appregnew.aspx (SharePoint)
SharePoint Host Instance Your SharePoint domain (e.g. [your-tenant].sharepoint.com)
AppDomain Pre-filled in Workfront: my.workfront.com
Redirect URI Pre-filled in Workfront: https://oauth.my.workfront.com/oauth2/redirect

Useful Links

Purpose URL
Generate Client ID & Secret https://[your-tenant].sharepoint.com/_layouts/15/appregnew.aspx
Grant Tenant-Wide Permissions (Option A) https://[your-tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx
Grant Site Collection Permissions (Option B/C) https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx
Verify App Principals https://[your-tenant].sharepoint.com/_layouts/15/appprincipals.aspx
Workfront Setup https://[your-tenant].my.workfront.com/setup
Official Adobe Docs https://experienceleague.adobe.com/en/docs/workfront/using/administration-and-setup/configure-integrations/configure-sharepoint-integration
Microsoft App Registration Docs https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azureacs

Note: The Client Secret generated via appregnew.aspx expires after 1 year. Set a calendar reminder to renew it before expiry to avoid losing access to linked documents.

No comments:

Post a Comment

Featured Post

SharePoint (Graph API) Integration with Adobe Workfront

SharePoint (Graph API) Integration with Adobe Workfront — Step-by-Step Guide The modern, supported method. This guide uses the new ShareP...

Popular posts