We would like to implement a configuration where user accounts in DocuSign are automatically assigned different accounts and permission profiles based on their Active Directory (AD) group membership.
Please confirm if this approach is supported with SAML/JIT provisioning setup, and if any additional configuration steps are required on either the Identity Provider or DocuSign side. We are using Entra ID as IDP.
Hello
Thank you for reaching out, and welcome to the Docusign Community! We appreciate your question and assure you that we are fully committed to providing you with the best service possible.
Here is an article explaining the SAML specifications for provisioning users in accounts and permission profiles based on the AD group you are on. The Accountid (Optional): xxxxxx. The accountId must be in the account GUID format. It must be specified in conjunction with the PermissionProfileId below, or the login will fail.
SAML Specifications
If you found the response to be a useful solution to your question, please “like” and mark it as the best answer by clicking “Select as Best” to make it easier for other users to find. Thank you!
Sincerely,
Ma. Cassandra | Docusign Community Moderator
If this helped, feel free to Like
and click "Best Answer"
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Back to Docusign.com