- 3 Minutes to read
- Print
- PDF
DocuSign
- 3 Minutes to read
- Print
- PDF
About this document
This document provides the step-by-step procedure to configure DocuSign in SAFE.
Introduction
SAFE integrates with DocuSign, fetching the security misconfiguration of the account in SAFE.
Prerequisites
Access required in SAFE:
SAFE Admin Access
Access required in DocuSign:
DocuSign Admin Access
Required User Inputs:
API URL
Account ID
Integration Key
Secret Key
Refresh Token
Scope:
Admin Access
Generate Connection Details
How to generate Integration Key and Secret Key:
Follow the URL and click on the Developer Account button on the top-right to log in to DocuSign developer account.
Upon login, click on the profile icon and select “My Apps and Keys”.
Click on Add App and Integration Key button.
Give a name to the App and click on the Create App button.
Copy and save the Integration Key while configuring DocuSign in SAFE.
Under User Application, select Yes for the Authorisation Code Grant method.
Click on Add Secret Key. Copy and save the Secret Key to be used while configuring DocuSign in SAFE.
Add a Redirect URI as https://us.safeone.ai/callback.
Click on Save.
How to generate a Refresh Token:
We will first generate a code grant value which will be required to generate the refresh token. This value is short-lived and is valid for approximately 60 seconds.
Open this URL with the previously copied integration key and the registered redirect URL:
https://account-d.docusign.com/oauth/auth?response_type=code&scope=signature&client_id={integration key}&redirect_uri={redirect url}
Click on Allow Access when prompted.
You will be presented with a 404 Not Found page. Do not close the tab and check the URL bar carefully. You will find the code value as shown in the exhibit below.
Copy and save the code grant value from the URL bar. Perform the next step of generating refresh token within 60 seconds after generating the above code.
We will also require an Authorization key which needs to be generated using the integration key and secret by executing the following code in any JavaScript console. You can use the following online compiler as well.
var encodedString = btoa('<integration key>:<secret key>'); console.log(encodedString);
Finally, run the below command to get the Refresh Token. Copy and save the Refresh Token to be used while configuring DocuSign in SAFE.
It's important to regularly update the Token in SAFE according to its expiration date.
curl --location 'https://account-d.docusign.com/oauth/token' \ --header 'Authorization: Basic {Autorization key}' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'code={Code Grant Value}' \ --data-urlencode 'grant_type=authorization_code'
How to get Account ID:
Follow the URL and click on Developer Account button on the top-right to login to DocuSign developer account.
Upon login, click on the profile icon and select “My Apps and Keys”.
Copy and save the Account ID from the left navigation panel for configuring DocuSign on SAFE.
How to get API URL:
Access the DocuSign API documentation by clicking on the provided link.
Upon reaching the DocuSign API documentation page, locate the section titled "Request the authorization code".
In the exhibit provided, find the base URL highlighted as 3. Copy and save this API Base URL to use it while configuring DocuSign in SAFE.
Configure DocuSign in SAFE
Log in to your SAFE account as Admin.
Click on the Integrations option from the left navigation.
Scroll to find DocuSign integration card or search for DocuSign in the search bar.
Hover over the DocuSign integration card and click on the Configure button.
Enter the following details:
API URL
Account ID
Integration Key
Secret Key
Refresh Token
Enter the Auto Sync frequency.
Click on the Test Connection button.
Once the connection is successful, click on the Save button.
Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.
Upon a successful sync, the system pulls the DocuSign assets and their findings in SAFE. You can track the status of the sync in the History table.
View Results
Go to the integration homepage.
Scroll to find the DocuSign integration card or search for DocuSign in the search bar.
Click on the Bitbucket integration card for Finding View and Asset View.
Finding View: This tab displays all the findings details pulled from DocuSign.
Asset View: This tab displays all the assets pulled from DocuSign.
History
Learn More about Integration History here.
SAFE's Outgoing IP Addresses
Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.