Skip to main content
arrow-left Back to Docusign.com

Authentication

Find answers to your Authentication questions.

  • 39 Topics
  • 81 Replies
39 Topics
F
Newcomer
Fusion06Newcomer
asked in Authentication
Refresh token expiry automation.

I am currently integrating DocuSign with Oracle Integration (OIC). At present, I am using the following REST API to generate a bearer token:<BASE_URL>/oauth/token?grant_type=refresh_token&client_id=[client_id]&client_secret=[client_secret]&refresh_token=[refresh_token] This works fine as long as my refresh token is valid. However, when the refresh token itself expires, I currently use Postman to manually log in to my DocuSign account, provide consent, and generate a new refresh token.This approach is not ideal since it introduces manual intervention and breaks the automation.My Questions: What is the best way to avoid this manual Postman step? Is there a way to fully automate the token generation process in Oracle Integration so that I don’t have to worry about refresh token expiry? Should I switch to the JWT Grant flow for this type of server-to-server integration? Any guidance on the recommended approach would be greatly appreciated.Thanks in advance! 

291
Cassandra.Loewen
Docusign Employee
R
Newcomer
RadhikaNewcomer
asked in Authentication
Error code : badrequest Response :{"error":"invalid_grant","error_description":"unsupported_grant_type"}

Hello,         I am developing an integration from Workday to DocuSign to pull the completed documents into Workday. I am getting following error when trying to authenticate to the endpoint - https://account-d.docusign.com/oauth/token to get the access tokenError code : badrequestResponse :{"error":"invalid_grant","error_description":"unsupported_grant_type"}I have the following Grant type which works fine in Postman. In addition to grant type, assertion key is generated which is passed along with grant type in Workdayassertion=@{props['jwt.assertion']}&grant_type=urn:ietf:params:oauth:grant-type:jwt-bearerPostman: 

5072
S
Newcomer
M
Newcomer
manjularaniNewcomer
asked in Authentication
Getting { "error": "invalid_grant", "error_description": "unauthorized_client" } while geenrating authtoken using https://account-d.docusign.com/oauth/token

I was using  https://account-d.docusign.com/oauth/token earlier and it was working fine. But now it stopped working. Getting the error  {   "error": "invalid_grant",   "error_description": "unauthorized_client" } . Can you please check and letm e know what could be the issue ?   

750
M
Newcomer
A
Newcomer
ACORTINewcomer
asked in Authentication
JWT Authentication

Hello,can someone help me to solve my Authentication problem. This is my code:// 1) Copia qui la tua Integration Key da Apps & Keysconst string IntegrationKey = "TUO-CLIENT-ID-GUID";// 2) Copia qui il tuo User ID (GUID) da My Account Informationconst string UserId = "TUO-USER-ID-GUID";// 3) Il PEM privato che hai scaricato da Service Integrationconst string PrivateKeyPath = "docusign_private_key.pem";// 4) L’host OAuth per democonst string OAuthHost = "account-d.docusign.com";// 5) L’URL base delle REST APIconst string BasePath = "https://demo.docusign.net/restapi";            var apiClient = new ApiClient(BasePath);            apiClient.SetOAuthBasePath(OAuthHost);            //byte[] privateKeyBytes = await File.ReadAllBytesAsync(PrivateKeyPath);            byte[] privateKeyBytes = Encoding.UTF8.GetBytes(privateKeyPem);//            var scopes = new[] { OAuth.ScopeSignature, OAuth.ScopeImpersonation };            OAuth.OAuthToken tokenInfo = apiClient.RequestJWTUserToken(       

561
Cassandra.Loewen
Docusign Employee
M
Newcomer
mxxkNewcomer
asked in Authentication
What exactly does the siteid claim in an id_token indicate?

Docusign account URL is account-specificAccording to https://developers.docusign.com/platform/api-endpoint-base-paths/, the {server} value (which determines the base URL for several Docusign APIs) is specific to a Docusign account:The Account Base URI section of the Apps and Keys page. This is confirmed by the structure of the /oauth/userinfo response, where the base URL can vary per account. For example:{ "sub": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "name": "First Last", "given_name": "First", "family_name": "Last", "created": "2015-08-13T22:03:03.45", "email": "first.last@example.com", "accounts": [ { "account_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "is_default": false, "account_name": "Example Europe Ltd", "base_uri": "https://eu.docusign.net" // Account 1 base URL }, { "account_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx", "is_default": true, "account_name": "Example Corporation", "base_uri": "https://na3.docusign.net"

752
M
Newcomer
S
Newcomer
SerjioNewcomer
asked in Authentication
Server error on /oauth/userinfo

Hi!I’m trying to make API calls according to this how-to articlehttps://developers.docusign.com/platform/auth/authcode/confidential-authcode-get-token/But I’m stuck on “Step 3. Get your user's base URI” - the https://account-d.docusign.com/oauth/userinfo url always response with:{ "error": "internal_server_error", "reference_id": "d63dceae-72c6-4d27-9218-3b0fd58b2c30"}Authorization header is added as described in the docs -Bearer somelongCode......ProvidedIDK why it’s happening because I’m able to get Docusign access token from step 2 - that’s means that credentials set properly. So what I’m doing wrong?Thanks!

1641
Cassandra.Loewen
Docusign Employee
G
Newcomer
Gijs van LithNewcomer
asked in Authentication
Docusign - Watch envelope Completed, The acces token provided is expired, revoked or malformed

Hello,I am trying to create a module in Make.com that checks if an envelope has been completed. This works for a while, but eventually, I receive an error message. I have a business plan with DocuSign. I have tried several solutions in both DocuSign and Make.com to resolve the issue, but so far without success.I believe the access token might only be valid for a limited time, and I’m looking for a way to either extend the access token’s validity or use a refresh token so that the system doesn’t keep failing as it does now.Has anyone encountered this issue and can offer guidance on how to solve it?Thank you in advance for your help!

611
Cassandra.Loewen
Docusign Employee
J
Newcomer
jloucksdevNewcomer
asked in Authentication
1Password manager extension causing Application Error

Hello, While doing user testing for a client I came across a bug on the docusign platform, specifically in the Firefox browser when the 1Password extension is enabled. The password manager seems to be blocking users from fully completing their account set up with Docusign.session transaction ID b055adb1-64a6-4592-95f6-868a8f9b8d8f and the steps to reproduce this error.Steps in Firefox browser (regular or private browsing, with browser cache fully cleared): Docusign account activation by following the generated link in email inbox Set password for Docusign Account → when the login button is clicked, 1pass redirects the user to the Application error message rather than the successful Docusign login page. This process works in Chrome with 1password extension installedAny advice on how to get around this bug (without disabling the extension) would be greatly appreciated.

1541
S
Newcomer
V
New Voice
versatilevatsNew Voice
asked in Authentication
When to use JWT Grant

JWT GrantI am new to Docusing and was going through the documentation. I stumbled upon the Authorization Grant of the Platform 101 docs, and read the above excerpt. Can anyone clarify what does this mean If you use a single login for all users in your integration, you should use JWT Grant.  Using single login for all of the integration users mean what? Does that all follow the same login/signup method or the same credentials?

1132
V
New Voice
W
Newcomer
waynemotNewcomer
asked in Authentication
Failing auth code grant after login

An Ruby on Rails application that I support is failing to send an envelope after the login/consent-grant step in the flow diagram.  I receive a response to my callback URL with a ‘code’ parameter set:https://elided-host.edu/auth/docusign/callback?code=eyJ0eXAiOiJNVCIsImFsZyI6IlJTMjU2Iiwia2lkIjoiOGFlYzFjZjQtYmE4NS00MDM5LWE1MmItYzVhODAxMjA3N2EyIn0.AQoAAAABAAYABwCAQhCGVSDdSAgAgM6WzVUg3UgCAD4nwjoJTdpMt_Th1QcGWaMVAAIAAAAYAAEAAAAFAAAADQAkAAAAZmQxZjg5YjItNjZkNi00MGRlLWFhYzctNGFhMTgzNzBlOTY5IgAkAAAAZmQxZjg5YjItNjZkNi00MGRlLWFhYzctNGFhMTgzNzBlOTY5MACAQhCGVSDdSBIAAgAAAAsAAABpbnRlcmFjdGl2ZQcAAABtYW5hZ2Vk.EIkNnGHh1iLCYF1i5JXeyfzU26B7Fx5bJao7X1_3WSJ-N56AoFAy8JA3MLbEWjWtesbXWXplU5HkIN9TyGWYqdwplswU6ai2F5pWnHy1ntHXJr-p2OFGSb7UApcMU4l2Bd-hx3TITt4zgz-YpEfJ6aZT1xoFrkhNFsrwyjpS7LbmGXLxbIKiv61rVi-09l1kem0-V8CufYuaQusnOKWIwlSCSpLXttRumLR4MUGLdTJ5AHEO5LXuKejdojD-M-P9iiTP8VRjnVSp50zi31vLeK6ghyT_ZQEeTs7aqoXIT8afi945JEExuLsIBURdQkIoQLqU0N_jftccaQlGm-YgzA&state=3066440d77f347fa1c1096f597dee488c55609163cc571

781
JohnSantos
Valued Contributor
K
Conversation Starter
kokosConversation Starter
asked in Authentication
Wrong username/password on soap call

Hello I am trying to make a soap call through postman but I get an error that my username or password is incorrect. For username I use the email I have on Docusign and for the password the app password I created from the settings. Is this combination correct?XML body <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.docusign.net/API/3.0">   <soapenv:Header>      <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">         <wsse:UsernameToken>            <wsse:Username>myEmail</wsse:Username>            <wsse:Password>myPassword</wsse:Password>         </wsse:UsernameToken>      </wsse:Security>   </soapenv:Header>   <soapenv:Body>      <ds:RequestEnvelope>         <ds:EnvelopeID>MyEnvelopeId</ds:EnvelopeID>      </ds:RequestEnvelope>   </soapenv:Body></

1563
Hengfeng Ge
Frequent Contributor
B
Newcomer
BalajiNewcomer
asked in Authentication
OAuth Implmentation

Getting Socket Exception while connecting the Production base path. It is running successfully with demo base path.We have followed the same set of procedure for creating RSA key and consent requirement completion.We are not sure, why it is getting Socket Connection reset exception and in detail exception shows “javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake”Could any one please advise?

820
B
Newcomer
J
Newcomer
jaysonmartinez2024Newcomer
asked in Authentication
End of Life of Legacy Authentication

Is it only the Authentication that will be end of life? can we still use the SDK from before and just change the authentication to 2.0 OAuth?I wanna know cuz were still using the v2.1, will this still work?

723
C
Community Moderator
K
Conversation Starter
kokosConversation Starter
asked in Authentication
create and authorize OAuth connection failed

Hello, In power platform I get the error create and authorize OAuth connection failed when I try tor deploy my app. What can be possibly wrong. It happens after I input my credentials correctly.  

6201
Hengfeng Ge
Frequent Contributor
S
Newcomer
sahibasNewcomer
asked in Authentication
Error calling CreateEnvelope: { "errorCode": "USER_AUTHENTICATION_FAILED"

In my C# code, when I try to create a Envelop got this errror,DocuSign.eSign.Client.ApiException: 'Error calling CreateEnvelope: {  "errorCode": "USER_AUTHENTICATION_FAILED",  "message": "One or both of Username and Password are invalid."}' Code...ApiClient apiClient = new ApiClient("https://demo.docusign.net/restapi");Configuration.Default.ApiClient = apiClient;//Verify Account Detailsstring accountId = loginApi(credential.UserName, credential.Password); -- account verification working fine here// |EnvelopesApi| contains methods related to creating and sending Envelopes (aka signature requests)EnvelopesApi envelopesApi = new EnvelopesApi();EnvelopeSummary envelopeSummary = envelopesApi.CreateEnvelope(accountId, envDef); --here i got the error    

2011
Hengfeng Ge
Frequent Contributor
P
Newcomer
paritoshmehraNewcomer
asked in Authentication
Mulitple GUID for one app

Hi,I have 1 app which is created by a user whom left the organisation and now the problem I’m facing is the app doesn’t work with my GUID (User Id) it’s asking for old GUID (user id) who created the app.Is there any way we can manage this situation. shift the app to mine guid? 

300
P
Newcomer
R
New Voice
rahulmishra179New Voice
asked in Authentication
Docusign JWT AUthentication

Hello Everyone,I am getting this errorjava.lang.RuntimeException: java.lang.ClassNotFoundException: com.sun.ws.rs.ext.RuntimeDelegateImplwhen i try to executeOAuth.OAuthToken token =apiClient.requestJWTUserToken(clientId,userId,scopes,rsaPrivateKey,expiresIn);please give solution so that i can proceed withe the integration.Thanks in Advance.

1646
A
Docusign Employee
V
New Voice
vashuNew Voice
asked in Authentication
Retrieving access token using JWT flow failing "user_not_found"

Hello members,I'm encountering an issue while generating an access token using the JWT flow in PowerShell. Initially, I thought it might be a simple fix, but I've been troubleshooting for several hours without identifying the root cause. Here's the situation:I'm using a PowerShell script to generate a JWT assertion and then use that assertion to retrieve a temporary access token. Unfortunately, my request is failing. For comparison, I generated a JWT using JWT.io with the same private and public keys, and it successfully retrieved an access token. I've verified that the structure and payload of both tokens appear similar(Check below, same iss and sub) Working Failing     At this point, I'm unsure what I'm missing. It could be a minor configuration error in my script.I'd appreciate any troubleshooting suggestions you might have. Please let me know if you require any additional information. Thanks,Sachin Vashishth

2581
S
Docusign Employee
S
Newcomer
SandhyaNewcomer
asked in Authentication
Invalid Grant - "no_valid_keys_or_signatures"

Hi, I am new to Docusign and facing an issue with access token being generated. The previous developer had integrated Appian with Docusign to send envelopes and the integration was working successfully till some time ago. Strangely, the integration is working well in both TEST and PROD. environments but failing in DEV. I am getting the error as “invalid grant”. The code and the keys are the same across all three environments except for the userId which is environment specific. I am using an Appian function to return the JWT token. Can anyone advice how to resolve this issue? TIA createdocusignrsajwttoken(  /*externalSystemKey:*/ cons!DSC_SCS_KEY_DOCUSING_RSA_PRIVATE_KEY,  /*iss:*/ cons!DSC_INTEGRATION_KEY,  /*alg:*/ cons!DSC_ENCRYPTION_TYPE_RS256,  /*typ:*/ cons!DSC_HEADER_TYPE_JWT,  /*aud:*/ cons!DSC_AUTH_AUD_URI,  /*scope:*/ joinarray({cons!DSC_SCOPE_SIGNATURE,cons!DSC_SCOPE_IMPERSONATION},cons!DSC_REQUEST_SCOPE_SEPARATOR),  /*exp:*/ 60000,  /*sub:*/ ri!userId)  

15514
S
Newcomer
2
Newcomer
21DeeptiNewcomer
asked in Authentication
Not getting consent page for Authorization Code Grant

Not getting consent page for Authorization Code Grant sample, trying with console sample java application. getting com.docusign.click.client.ApiException: Error while requesting server, received a non successful HTTP code 400 with response Body: '{"error":"consent_required"}'

3713
Michael.Rave
Docusign Employee
E
Newcomer
ericwu-bluefleetNewcomer
asked in Authentication
Can I have multiple production application keys from multiple companies?

I represent an ERP from which my customers (Business) will emit signable documents.Currently, if my customer requires a Docusign integration, we ask them to create an appdemo account so that we (, logging in with their credentials, ) can create and configure the App & Key credentials, security settings, etc. Then, when the tests are finished, they have to provide another (this time, paid) account so we can link it with their previous development account.My intention is to create the App & Keys from my Docusign enterprise account for each of these customers whenever they require a Docusign integration. Then, when I finish the mandated 20 integrated tests, I would send them the OAuth link so they can login and authorize using their subscribed account.By doing that, I intend to keep all integration keys my ERP uses in a single, managed, account.Is there an issue here? Should I not be doing that? Is this behavior expected? And if not, what are the alternatives? 

724
E
Newcomer
R
Newcomer
RyanTranNewcomer
asked in Authentication
Error: Access token with Authorization Code Grant

I’m trying to get the access token.URI: https://account-d.docusign.com/oauth/tokenheaderAuthorization: base64 encoded of integration and secret.bodygrant_type: authorization_codecode: Code from the auth response. But I got the reply {    "error": "invalid_grant",    "error_description": "unsupported_grant_type"} Any idea what I’ve done wrong?

4432
R
Newcomer
C
Docusign Employee
Community UserLegacy User
asked in Authentication
We bought an account form docusign. we cant able to create apps or integration key in API and Keys.

We bought an account form docusign. we cant able to create apps or integration key in API and Keys.

845
Renan.Araujo
Docusign Employee
S
Newcomer
SaravanaNewcomer
asked in Authentication
Facing Issues

Hi I am facing these kind of issues  {    "error": "invalid_grant",    "error_description": "no_valid_keys_or_signatures"}in jwt token to get Access tokeni give prpoer integration , secreat and private key but facing same issues so, how can i solve that oneSo any one have a sample application for jwt grant type , please send as the zip format

1834
Renan.Araujo
Docusign Employee
V
Newcomer
VeerabhadraNewcomer
asked in Authentication
Error while requesting server, received a non successful HTTP code with response Body: {"error":"invalid_grant","error_description":"user_not_found"}

Error while requesting server, received a non successful HTTP code with response Body: {"error":"invalid_grant","error_description":"user_not_found"} getting in preproduction

2461
Renan.Araujo
Docusign Employee

Badge winners

Show All Badges
Code of Conduct

Docusign Community

Code of Conduct