Configuring Provisioning for DocuSign

This guide provides the steps required to configure Provisioning for DocuSign.




The following provisioning features are supported:


Complete the following before you configure provisioning for DocuSign:

  1. Obtain your Account ID:

    • Sign in to DocuSign as an administrator.

    • Navigate to Admin > INTEGRATIONS > API and Keys and locate your API Account ID value within the My Account Information section:


  2. Verify the DocuSign app’s General Settings in Okta:

    • In Okta, select the General tab for the DocuSign app.

    • Specify an Instance Type.

      Note: The instance you select is used to validate against the API credentials (see Configuration Steps).


Configuration Steps

  1. Configure your Provisioning settings for DocuSign as follows:

    • Check the Enable API Integration box.

    • Enter your DocuSign API Account ID.

      Note: The API credentials need to be for the instance you select under General Settings (see Requirements).

    • Click Authenticate with DocuSign. This redirects you to the DocuSign login page.

    • docusign-prov2.png

    • Now sign in to DocuSign as an administrator to allow Okta to manage DocuSign users.

    • Click Save.

  2. In Okta, select To App in the left panel, then select the Provisioning Features you want to enable.


  3. Click Save.

  4. You can now assign people to the app (if needed) and finish the application setup.

User Assignment

  1. To assign users to the Docusign app: open the app, select the Assignment tab, click Assign, then select Assign to People:


  2. Then, in the Assign DocuSign to People dialog, select a user, then click Assign button.


  3. You can set whether users can send envelopes or not by selecting either true or false in the from Can Send Envelope field. If set to true, this user can send envelopes though the DocuSign.


  4. Or you can set the desired Permission profile, either DocuSign Viewer, DocuSign Sender, or Account Administrator:


  5. Permission Profile Attribute

    Some old applications may not have this attribute, to add it, do the following:

    • Re-authenticate API Integration.
    • Add the Permission profile attribute via Schema Discovery.
    • Refresh Application Data to fetch the list of values.

    Note that if you have both Permission Profile and Can Send Envelope attributes selected, all other sets of permissions except for CanSendEnvelope will be controlled by the Permission profile attribute. The CanSendEnvelope permission will be controlled by the Can Send Envelope attribute instead.

Schema Discovery

To add extra attributes to a User’s Profile, follow the instructions below:

  1. In Okta, from the Admin dashboard, navigate to Directory > Profile Editor.

  2. Select APPS in the left navigation pane, then find your app in the list.

  3. Check the list of attributes, and if you decide you need more, click Add Attribute. A list of extended attributes appears.

  4. Select the attributes you want to add (for example all address fields), then click Save:


  5. The added attribute(s) will appear after refreshing the page. You can now import and push these user attribute values to/from DocuSign:


    You can create mappings for your additional attributes::



Troubleshooting Tips

  1. Errors encountered while authenticating with DocuSign:

    • Make sure your API Account ID matches the DocuSign Administrator credentials.

  2. Errors encountered while assigning users on DocuSign application:

    • DocuSign user has disabled Senders may add new spellings of my name flag in Preferences > Names Available section.


      This may produce errors like this: