SharePoint Integration with Adobe Workfront — Step-by-Step Setup Guide
Who is this for? Anyone setting up the legacy SharePoint integration in Workfront from scratch. No prior experience needed — follow every step exactly as written.
What You Will Need Before You Start
| Item | Where to Get It |
|---|---|
| SharePoint Online admin or site admin access | Your IT/Microsoft 365 admin |
| Adobe Workfront admin access | Your Workfront administrator |
| Your SharePoint tenant URL | Example: https://[your-tenant].sharepoint.com |
Overview of the 3 Phases
Phase 1 → Go to SharePoint → Register the App → Get Client ID & Client Secret
Phase 2 → Go to Workfront → Fill in the Integration Form
Phase 3 → Verify & Test
Phase 1: Generate Client ID and Client Secret in SharePoint
This is the most important phase. You will visit a special SharePoint page to create an "App Registration" that gives Workfront permission to talk to SharePoint.
Step 1 — Open the App Registration Page in SharePoint
-
Open your browser (Chrome or Edge recommended).
-
In the address bar, type your SharePoint URL and add
/_layouts/15/appregnew.aspxat the end.Example:
https://[your-tenant].sharepoint.com/_layouts/15/appregnew.aspxReplace
[your-tenant]with your actual SharePoint domain name. -
Press Enter. You will see a form titled "App Information" or "New App".
⚠️ If you see an error like "Sorry, you don't have access" — contact your Microsoft 365 Global Administrator. Only tenant admins can access this page.
Step 2 — Fill in the App Registration Form
You will see fields on the page. Fill them in exactly as described below:
| Field | What to Enter |
|---|---|
| Client Id | Click the Generate button next to this field. A GUID (long code) will auto-fill. |
| Client Secret | Click the Generate button next to this field. A secret code will auto-fill. |
| Title | Type any name. Example: Workfront SharePoint App |
| App Domain | Type exactly: my.workfront.com |
| Redirect URI | Type exactly: https://oauth.my.workfront.com/oauth2/redirect |
📋 CRITICAL: Before clicking Create, copy and save the Client ID and Client Secret to Notepad or a secure location. You will NOT be able to see the Client Secret again after leaving this page.
Step 3 — Click Create
- After filling all fields, scroll down and click Create.
- You will see a confirmation message: "The app identifier has been successfully created."
- The page will also display the Client ID and Client Secret one final time — copy both values now if you haven't already.
Step 4 — Grant Permissions to the App in SharePoint
Choose one of the three permission models below based on your organisation's requirement.
🔵 Option A — Tenant-Wide Access (All Site Collections)
Use this when Workfront needs access to all site collections across the entire SharePoint tenant.
URL to open:
https://[your-tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx
⚠️ Note the
-adminin the URL. Without it, tenant-scoped permissions will NOT be granted.
Permission XML to paste:
<AppPermissionRequests AllowAppOnlyPolicy="true">
<AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
</AppPermissionRequests>
Steps:
- Open the URL above.
- Paste the Client ID in the App Id field → click Lookup.
- Paste the XML above into the Permission Request XML field.
- Click Create → click Trust It in the popup.
✅ The app now has access to all site collections in the tenant.
🟡 Option B — Single Site Collection Access
Use this when Workfront should access only one specific site collection.
URL to open (replace [your-tenant] and [SiteName] with actual values):
https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx
⚠️ Open this URL from within the target site collection — NOT from the admin URL.
Permission XML to paste:
<AppPermissionRequests AllowAppOnlyPolicy="true">
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" />
</AppPermissionRequests>
Steps:
- Open the site-specific URL above.
- Paste the Client ID in the App Id field → click Lookup.
- Paste the XML above into the Permission Request XML field.
- Click Create → click Trust It in the popup.
✅ The app now has access to only that specific site collection.
🟢 Option C — Multiple Specific Site Collections
Use this when Workfront needs access to more than one site collection, but not all.
There is no single XML that can list multiple site collections. You must repeat Option B for each site collection individually.
For each site collection you want to add:
- Open:
https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx - Paste the Client ID → click Lookup.
- Paste this XML:
<AppPermissionRequests AllowAppOnlyPolicy="true"> <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" /></AppPermissionRequests> - Click Create → click Trust It.
- Repeat from step 1 for each additional site collection.
✅ Each site collection is granted independently using the same Client ID.
Comparison Table — Which Option Should You Use?
| Option A — Tenant | Option B — Single Site | Option C — Multiple Sites | |
|---|---|---|---|
| Access Scope | All site collections | One site collection | Selected site collections |
| URL Used | -admin.sharepoint.com appinv.aspx |
sites/[Name] appinv.aspx |
sites/[Name] appinv.aspx (repeated) |
| XML Scope Value | content/tenant |
content/sitecollection |
content/sitecollection |
| Steps Required | One time | One time | Once per site |
| Best For | Full enterprise rollout | Single team or department | Controlled multi-team rollout |
| Security Level | Broad | Tight | Balanced |
Phase 2: Configure the Integration in Adobe Workfront
Now you will go to Workfront and fill in the form.
Step 5 — Log into Workfront as Administrator
- Open your browser and go to your Workfront URL:
https://[your-tenant].my.workfront.com - Log in with your Workfront administrator credentials.
Step 6 — Navigate to SharePoint Integration Settings
-
Click the Main Menu icon (grid/waffle icon) in the top-right corner of Workfront.
-
Click Setup (gear icon).
-
In the left panel, click Documents.
-
Under Documents, click SharePoint Integration.
-
Click the + Add SharePoint Integration button (or New Integration if shown).
The SharePoint Integration form will open — this is the form shown in the screenshots.
Step 7 — Fill in the SharePoint Integration Form
The form has 4 sections in the left menu. Fill them in order:
Section 1: SharePoint Instance Name
| Field | What to Enter |
|---|---|
| Name | A friendly label for this integration. Example: SharePoint Online Integration |
Click Next or go to the next section.
Section 2: SharePoint Info
| Field | What to Enter |
|---|---|
| SharePoint Host Instance | Your SharePoint URL without https://. Example: [your-tenant].sharepoint.com |
| Azure Access Domain | Your SharePoint URL without https://. Example: [your-tenant].sharepoint.com |
| Site Collections Authentication | Type [your-tenant].sharepoint.com (same as above) |
Section 3: Connection Info
This is where you enter the credentials from Phase 1.
| Field | What to Enter |
|---|---|
| SharePoint Client ID | Paste the Client ID you copied in Step 2 |
| SharePoint Client Secret | Paste the Client Secret you copied in Step 2 |
| Workfront SharePoint AppDomain | Pre-filled: my.workfront.com — do not change |
| Workfront SharePoint Redirect URI | Pre-filled: https://oauth.my.workfront.com/oauth2/redirect — do not change |
⚠️ Important: The Client Secret must be exactly 44 characters long. If it's shorter, go back to the SharePoint
appregnew.aspxpage and generate a new one. You may need to try 2–3 times until a 44-character secret is generated.
Section 4: Visible Site Collections
This section lists the SharePoint site collections that will be accessible inside Workfront.
- If you chose Option A (tenant-wide) — leave this as default; all sites will appear automatically.
- If you chose Option B or C (specific sites) — add only those site collection URLs here to match the permissions you granted.
Step 8 — Click Confirm
- Review all fields one more time.
- Click the Confirm button (blue button, bottom-right).
- Workfront will test the connection. If successful, the integration will be saved.
Step 9 — Enable the Integration in Cloud Providers Settings
- Go back to Setup → Documents → Cloud Providers.
- Make sure both SharePoint and SharePoint (Graph API) checkboxes are enabled (checked).
- Click Save.
Phase 3: Verify the Integration
Step 10 — Test from a Document Area
-
Go to any Project or Task in Workfront.
-
Click the Documents tab.
-
Click Add New → From SharePoint.
-
You should see your SharePoint sites listed and be able to browse folders.
✅ If you can browse SharePoint files — the integration is working correctly!
Troubleshooting
| Problem | Fix |
|---|---|
| "App not trusted" error | Go back to appinv.aspx and click Trust It again |
| Client Secret not accepted / 44 character error | Go to appregnew.aspx, generate a new Client Secret, and update it in Workfront |
| "Sorry, only tenant administrators can access" | Ask your Microsoft 365 Global Admin to perform Steps 1–4 |
| Cannot see SharePoint sites in Workfront | Ensure your account has View access to those site collections in SharePoint |
| Previously linked documents not accessible | A user with SharePoint access must re-link the folder from the Documents tab |
| Site not visible after Option B/C | Confirm the appinv.aspx step was completed on that specific site URL, not the admin URL |
Quick Reference — Values Summary
| Value | Where It Comes From |
|---|---|
| Client ID | Generated at appregnew.aspx (SharePoint) |
| Client Secret | Generated at appregnew.aspx (SharePoint) |
| SharePoint Host Instance | Your SharePoint domain (e.g. [your-tenant].sharepoint.com) |
| AppDomain | Pre-filled in Workfront: my.workfront.com |
| Redirect URI | Pre-filled in Workfront: https://oauth.my.workfront.com/oauth2/redirect |
Useful Links
| Purpose | URL |
|---|---|
| Generate Client ID & Secret | https://[your-tenant].sharepoint.com/_layouts/15/appregnew.aspx |
| Grant Tenant-Wide Permissions (Option A) | https://[your-tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx |
| Grant Site Collection Permissions (Option B/C) | https://[your-tenant].sharepoint.com/sites/[SiteName]/_layouts/15/appinv.aspx |
| Verify App Principals | https://[your-tenant].sharepoint.com/_layouts/15/appprincipals.aspx |
| Workfront Setup | https://[your-tenant].my.workfront.com/setup |
| Official Adobe Docs | https://experienceleague.adobe.com/en/docs/workfront/using/administration-and-setup/configure-integrations/configure-sharepoint-integration |
| Microsoft App Registration Docs | https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azureacs |
Note: The Client Secret generated via
appregnew.aspxexpires after 1 year. Set a calendar reminder to renew it before expiry to avoid losing access to linked documents.
No comments:
Post a Comment