---
title: DocuSign
description: The Advanced Identity Cloud DocuSign application lets you manage DocuSign service accounts and synchronize DocuSign accounts and Advanced Identity Cloud identities.
component: pingoneaic
page_id: pingoneaic:app-management:applications/docusign
canonical_url: https://docs.pingidentity.com/pingoneaic/app-management/applications/docusign.html
page_aliases: ["release-notes:rapid-channel/docusign-app.adoc"]
section_ids:
  register_the_application: Register the application
  configure_provisioning: Configure provisioning
  provision_side_tabs: Provision side tabs
  next_steps: Next steps
---

# DocuSign

The Advanced Identity Cloud DocuSign application lets you manage DocuSign service accounts and synchronize DocuSign accounts and Advanced Identity Cloud identities.

## Register the application

1. In the Advanced Identity Cloud admin console, go to Applications, and click [icon: grid_view, set=material, size=inline] Browse App Catalog.

2. In the Browse App Catalog modal, select an application, and click Next.

3. Review the Application Integration information, and click Next.

4. In the Application Details window, specify the name, description, application owners, and logo for the application.

5. To make the application an [Authoritative](../applications.html#target_and_authoritative_applications) source of identity data, select the Authoritative check box. This option is not available for every application.

6. Click Create Application.

## Configure provisioning

You must have a DocuSign administrator account and be able to add an integrator key ([DocuSign Documentation](https://support.docusign.com/guides/ndse-admin-guide-api-and-keys)).

|   |                                                                                                                                                                    |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|   | To modify the settings for an existing provisioning connection, in the Advanced Identity Cloud admin console, click the Provisioning tab, and then click Settings. |

1. In DocuSign, set up a DocuSign app and integration key:

   1. Log in to DocuSign and go to [Integrations > Apps and Keys](https://apps-d.docusign.com/admin/apps-and-keys).

   2. On the Apps and Keys page, in the My Account Information area, copy and save the following values:

      | DocuSign field   | Advanced Identity Cloud application field |
      | ---------------- | ----------------------------------------- |
      | API Account ID   | Account                                   |
      | Account Base URI | Service Endpoint URI                      |

      > **Collapse: Show Me**
      >
      > ![DocuSign My Account Information](../_images/docusign-my-account-area.png)

   3. Click Add App and Integration Key.

      > **Collapse: Show Me**
      >
      > ![DocuSign Add App and Integration Key button](../_images/docusign-add-app-integration-key-btn.png)

   4. In the Add Integration Key modal, enter an App Name, and click Create App.

      > **Collapse: Show Me**
      >
      > ![DocuSign Add Integration Key modal](../_images/docusign-add-integration-key-modal.png)

   5. On the Apps and Keys > App Name page, copy the Integration Key and save the value. Use this value as the Client Id in Advanced Identity Cloud.

      > **Collapse: Show Me**
      >
      > ![DocuSign Add Integration Key modal](../_images/docusign-copy-integration-key.png)

   6. In the Authentication area, click + Add Secret Key, and copy and save the value. Use this value as the Client Secret in Advanced Identity Cloud.

      > **Collapse: Show Me**
      >
      > ![DocuSign Add Secret Key](../_images/docusign-add-secret-key.png)

   |   |                                                                                          |
   | - | ---------------------------------------------------------------------------------------- |
   |   | Keep DocuSign open, as you'll need to add information during provisioning configuration. |

2. In the Advanced Identity Cloud admin console, click the Provisioning tab, and then click Set up Provisioning.

3. In the Configure DocuSign Connected App modal, copy the Redirect URI, and click Next.

   > **Collapse: Show Me**
   >
   > ![Configure DocuSign modal](../_images/ui-applications-configure-docusign-modal.png)

4. In DocuSign, in the Additional settings area, click Add URI, paste the redirect URI, and click Save.

   > **Collapse: Show Me**
   >
   > ![DocuSign Add URI](../_images/docusign-add-uri.png)

5. Go to Integrations > API Usage Center, and from the API Limit area, make note of the following:

   * Hourly Limit

   * Burst Limit

     > **Collapse: Show Me**
     >
     > ![DocuSign API Limit](../_images/docusign-api-limit.png)

   Use these values in the Advanced Identity Cloud advanced settings.

6. In the Advanced Identity Cloud admin console, configure the following fields:

   | Field                | Description                                                                           |
   | -------------------- | ------------------------------------------------------------------------------------- |
   | Service Endpoint URI | The DocuSign Account Base URI.                                                        |
   | Account              | The DocuSign API Account ID.                                                          |
   | Client ID            | The client ID for OAuth 2.0 flow. The DocuSign Integration Key.                       |
   | Client Secret        | The client secret for OAuth 2.0 flow. The DocuSign Secret Key.                        |
   | Maximum Connections  | The maximum size of the HTTP connection pool. The default is 10 connections.          |
   | Connection Timeout   | The timeout for the underlying HTTP connection in seconds. The default is 30 seconds. |

7. Optionally, click Show advanced settings to set any of the following options:

   **Application specific settings**

   | Field or option                      | Description                                                                                                                                                                                                                                                                                      |
   | ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
   | Use Basic Auth for Token Negotiation | Select this option to send the client ID and client secret to DocuSign as authorization headers. If the option is not selected, the ID and secret are sent as form data.                                                                                                                         |
   | Hour Rate Limit                      | The hourly rate limit for the DocuSign API. The DocuSign Hourly Limit.                                                                                                                                                                                                                           |
   | Burst Rate Limit                     | The burst rate limit for the DocuSign API. The DocuSign Burst Limit.                                                                                                                                                                                                                             |
   | Disable Http Compression             | Content compression is enabled by default. Select this option to disable it.                                                                                                                                                                                                                     |
   | Debug/Test settings                  | 	Only use these settings for test environments. Don't enable for production environments.Selecting this option displays the following options:- Accept Self Signed Certificates: Enable to accept self-signed certificates.

   - Disable Host Name Verifier: Enable to disable hostname verifiers. |
   | Exclude Unmodified                   | Select this option to synchronize only the modified properties on a target resource.                                                                                                                                                                                                             |

   **Pool configuration**

   | Field                                   | Description                                                                                                                                                                           |
   | --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   | Max idle and active container instances | The maximum number of idle and active container instances. The default value is `10`.                                                                                                 |
   | Max Idle Connector Instances            | The maximum number of idle connector instances. The default value is `10`.                                                                                                            |
   | Set Timeout Period                      | Select to enable a timeout period for the connection. After enabling, configure the following:- Timeout period (ms): The timeout period in milliseconds.                              |
   | Set Minimum Idle Time                   | Select to set a minimum time (in milliseconds) before an idle object is removed. After enabling, configure the following:- Min idle time (ms): The minimum idle time in milliseconds. |
   | Min Idle Instances                      | The minimum number of idle connector instances.                                                                                                                                       |

   **Result Handler configuration**

   | Field                                                                   | Description                                                                       |
   | ----------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
   | Enable for connectors with the attribute normalizer interface           | Enables the attribute normalizer interface for supported connectors.              |
   | Enable local filtering/search features                                  | Enables local filtering and search capabilities.                                  |
   | Enable case insensitive filter                                          | Configures filters to ignore case sensitivity.                                    |
   | Enable configuration of search attributes; disable for local connectors | Enables search attribute configuration. Disable this option for local connectors. |

   1. In the Operation Timeouts (ms) area, select the operations to enforce timeouts on and enter the duration in milliseconds.

      Available operations include Create, Validate, Test, Enable a Script on the Connector, Schema, Delete, Update, Sync, Authenticate, Get, Enable a Script on the Target, and Search.

   2. In the Operation Rate Limits area, select the operations to enforce rate limits on.

      You can enforce limits on specific operations, including Create, Validate, Test, Script on Connector, Schema, Delete, Update, Sync, Authenticate, Get, Script on Target, and Search.

      For each selected operation, configure the following fields:

      | Field           | Description                        |
      | --------------- | ---------------------------------- |
      | Request Limit   | Requests allowed over time.        |
      | Request Period  | Limit resets after this time (ms). |
      | Request Timeout | Time before exception thrown (ms). |

8. Click Connect.

9. Verify the information in the Details tab.

## Provision side tabs

The object type determines the side tabs that display on the Provisioning tab. Use the object type list to select an object type, such as `Group`. Afterward, you can configure properties in the different sub-tabs under the Provisioning tab.

![Sub-tabs under the Provisioning tab](../_images/ui-workforce-provisioning.png)

| Provisioning tab  | Description                                                                                                                                                                                                                                                                                                | Related sections                                                                                                                                      |
| ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| Details           | View and manage an application, including name, ID, and native type.                                                                                                                                                                                                                                       | Select the specific application from [Provision settings for an application](../provision-an-application.html#provision_settings_for_an_application). |
| Properties        | View and manage properties for the selected object type.                                                                                                                                                                                                                                                   | [Manage application attributes](../provision-an-application.html#manage_application_attributes)                                                       |
| Data              | View data about the selected object type.                                                                                                                                                                                                                                                                  | [View user access data](../provision-an-application.html#view_user_access_data)                                                                       |
| Mapping           | View and manage mappings from the Advanced Identity Cloud admin console properties to external system properties and from external system properties to the Advanced Identity Cloud admin console properties.                                                                                              | [Manage mappings](../provision-an-application.html#manage_mappings)                                                                                   |
| Reconciliation    | Preview mappings on target applications between external systems and the Advanced Identity Cloud admin console, and reconcile the data between the two systems.View and manage rules for the users and groups that use your application.View and manage schedules for Full and Incremental reconciliation. | [Reconcile and synchronize end-user accounts](../provision-an-application.html#recon-sync-end-users)                                                  |
| Privacy & Consent | Manage end-user data sharing and synchronization.                                                                                                                                                                                                                                                          | [Configure end-user data sharing](../provision-an-application.html#config-end-user-data-sharing)                                                      |
| Rules             | View and manage provisioning rules for mappings between Advanced Identity Cloud and a target application.                                                                                                                                                                                                  | [Manage provisioning rules](../provision-an-application.html#manage-provisioning-rules)                                                               |
| Advanced Sync     | Create and manage mappings between a managed object type and an application or between applications.                                                                                                                                                                                                       | [Manage advanced sync](../provision-an-application.html#manage-advanced-sync)                                                                         |

## Next steps

* [icon: check-square-o, set=fa][Application management](../applications.html)

* [icon: check-square-o, set=fa][App catalog](../app-catalog.html)

* [icon: check-square-o, set=fa][Register an application](../register-an-application.html) or [Register a custom or SSO application](../register-a-custom-application.html)

* [icon: check-square-o, set=fa][Provision an application](../provision-an-application.html)

* [icon: square-o, set=fa]*[Manage end users and roles](../manage-users-and-roles.html)*

* [icon: square-o, set=fa][Manage application registrations](../manage-app-status.html)
