DocuSign
  • 3 Minutes to read
  • PDF

DocuSign

  • PDF

Article summary

About this document


This document provides the step-by-step procedure to configure DocuSign in SAFE. 

Introduction


SAFE integrates with DocuSign, fetching the security misconfiguration of the account in SAFE.

Prerequisites


  • Access required in SAFE:

    • SAFE Admin Access

  • Access required in DocuSign:

    • DocuSign Admin Access

  • Required User Inputs:

    • API URL

    • Account ID

    • Integration Key

    • Secret Key

    • Refresh Token

  • Scope:

    • Admin Access

Generate Connection Details


  • How to generate Integration Key and Secret Key:

    • Follow the URL and click on the Developer Account button on the top-right to log in to DocuSign developer account.

    • Upon login, click on the profile icon and select “My Apps and Keys”.

    • Click on Add App and Integration Key button.

    • Give a name to the App and click on the Create App button.

    • Copy and save the Integration Key while configuring DocuSign in SAFE.

    • Under User Application, select Yes for the Authorisation Code Grant method.

    • Click on Add Secret Key. Copy and save the Secret Key to be used while configuring DocuSign in SAFE.

    • Add a Redirect URI as https://us.safeone.ai/callback.

    • Click on Save.

  • How to generate a Refresh Token:

    • We will first generate a code grant value which will be required to generate the refresh token. This value is short-lived and is valid for approximately 60 seconds.

      • Open this URL with the previously copied integration key and the registered redirect URL:

        https://account-d.docusign.com/oauth/auth?response_type=code&scope=signature&client_id={integration key}&redirect_uri={redirect url}
    • Click on Allow Access when prompted.

    • You will be presented with a 404 Not Found page. Do not close the tab and check the URL bar carefully. You will find the code value as shown in the exhibit below.

    • Copy and save the code grant value from the URL bar. Perform the next step of generating refresh token within 60 seconds after generating the above code.

    • We will also require an Authorization key which needs to be generated using the integration key and secret by executing the following code in any JavaScript console. You can use the following online compiler as well.

      var encodedString = btoa('<integration key>:<secret key>');
      console.log(encodedString);
    • Finally, run the below command to get the Refresh Token. Copy and save the Refresh Token to be used while configuring DocuSign in SAFE.

    • It's important to regularly update the Token in SAFE according to its expiration date.

      curl --location 'https://account-d.docusign.com/oauth/token' \
           --header 'Authorization: Basic {Autorization key}' \
           --header 'Content-Type: application/x-www-form-urlencoded' \
           --data-urlencode 'code={Code Grant Value}' \
           --data-urlencode 'grant_type=authorization_code'
  • How to get Account ID:

  • Follow the URL and click on Developer Account button on the top-right to login to DocuSign developer account.

  • Upon login, click on the profile icon and select “My Apps and Keys”.

  • Copy and save the Account ID from the left navigation panel for configuring DocuSign on SAFE.

  • How to get API URL:

    • Access the DocuSign API documentation by clicking on the provided link.

    • Upon reaching the DocuSign API documentation page, locate the section titled "Request the authorization code".

    • In the exhibit provided, find the base URL highlighted as 3. Copy and save this API Base URL to use it while configuring DocuSign in SAFE.

Configure DocuSign in SAFE


  • Log in to your SAFE account as Admin.

  • Click on the Integrations option from the left navigation.

  • Scroll to find DocuSign integration card or search for DocuSign in the search bar.

  • Hover over the DocuSign integration card and click on the Configure button.

  • Enter the following details:

    • API URL 

    • Account ID

    • Integration Key

    • Secret Key

    • Refresh Token

  • Enter the Auto Sync frequency.

  • Click on the Test Connection button.

  • Once the connection is successful, click on the Save button.

  • Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

  • Upon a successful sync, the system pulls the DocuSign assets and their findings in SAFE. You can track the status of the sync in the History table.

View Results


  • Go to the integration homepage.

  • Scroll to find the DocuSign integration card or search for DocuSign in the search bar.

  • Click on the Bitbucket integration card for Finding View and Asset View.

    • Finding View: This tab displays all the findings details pulled from DocuSign.

    • Asset View: This tab displays all the assets pulled from DocuSign.


History

Learn More about Integration History here.

SAFE's Outgoing IP Addresses


Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.


Was this article helpful?

What's Next