Docusign is committed to maintaining exceptional levels of security and operability across all of its products and integrations. In keeping with this commitment, we will begin the migration of selected Embedded view API methods in line with our August 2024 Release.
This change is particularly important for our ISVs, as they address security issues when the API user differs from the application user. ISVs need to start planning to use the new API in new applications entering production later this year. Docusign will maintain backward compatibility for a limited time.
What is the impact on our ISVs?
ISVs using the following eSignature REST API methods as part of their integrations will be impacted:
- Embedded Sender
- Embedded Edit
- Embedded Correct
- Embedded Template Edit View
The CreateRecipient view, which is used for embedded signing, is not affected.
The expected workload to update the impacted applications is minimal. Docusign will provide detailed instructions as part of the documentation associated with these APIs, in line with the information available in these blog posts:
If you’re unsure about your integration using these methods, use the API Request Logging feature to check if your application makes any of these API calls.
ISVs that use the License/Embed (OEM) business model bear the highest risk using the current APIs; ISVs that have created connectors are also vulnerable but to a lesser extent. Nevertheless, all ISVs should immediately take action on the updates as soon as practical.
Timeline of Changes:
- August 2024: Docusign will deliver the API updates and documentation as part of the August 2024 release. Ensure you sign up for the Docusign Product Updates newsletter
- October 2024: ISVs must have identified the need for migration for their existing integrations; all new integrations can only use the new versions of the API methods
- November 2024: ISV License/Embed (OEM) partners to complete necessary migrations
- February 2024: ISVs' general connectors to complete migration.