Authentication
Thursday, October 15, 2020 at 01:33pmHi,
please suggest what are suitable and best authentication tokens (user, sender, signer etc.,) that we should implement if we will have to get the unassigned docs signed through OSS
Thanks
Naresh
Reply to: Authentication
Thursday, October 15, 2020 at 02:47pmHi Naresh,
First, it's important to be aware that if you use an API to sign a document, the audit trail will record the fact that it's your application's IP that signed the document, not the actual signer him/herself.
Given this background, if you still decided to do so
-to sign on behalf of a signer, you need to follow a three step approach documented in this guide, and the authentication token used in this scenario is signer authentication token
-to sign on behalf of the API Key holder, you can directly use the call in this guide
-if the sender is different from the API Key holder (the API Key holder sends the package on behalf of the actual sender), you can use sender authentication token instead in the three step approach.
Duo