Embed OneSpan inPerson signing URL in an iframe

Hi Vang,

Let me put it this way:

Step1: create a signer authentication token using this API (it's different from the blog):
POST /api/authenticationTokens/signer/multiUse

Example Request payload:
{"packageId":"CHZA9M_-5CpbRJFUVv2PSWSDt2o=","signerId":"{either sender's signer ID, or signer's email}"}

Step2: build below link with signer auth token:
https://sandbox.esignlive.com/access?sessionToken={signer_auth_token}

I have a demo iFrame page set up at https://4ac6-104-221-13-174.ngrok.io/iframe_best_practice.html, where the iFrame URL is built using this formula and you can see the welcome page.

Duo

Hi Vang,

Thanks for your post! As the error message suggested, the signer authentication token used in the link has a 30 minutes expiry and might be expired when you consumed the link:
https://sandbox.esignlive.com/auth?authenticationToken=***token***&target=https://sandbox.esignlive.com/transaction/**package_id**=/sign

Is the issue consistent when you regenerate a new signer auth token?

Duo

https://www.onespan.com/blog/onespan-sign-developer-person-signing <= the inPerson URL that I mentioned above is exactly the first implementation in this article but it won't work for tablet iframe.

Yes, the issue is consistent even for the token that just generated.

Hi Vang,

Could you try this formula and let me know how this works:
https://sandbox.esignlive.com/access?sessionToken={signerAuthToken}

I think the above formula doesn't work because it first logs onto the sender's portal then redirects to the signing ceremony page, while sender portal is not cookieless and can't be displayed when third-part cookie is disabled.

Duo

I believe the above URL will go straight to the singing ceremony page but we want the sender's portal (attachment) so all parties can signing on one device that is the requirement that we want to accomplish.

Thank you so much! I didn't notice that it has to be SENDER ID/EMAIL :) so sender's id/email will bring us to sender portal.