Add a new configuration to the ‘Signing Settings’ page to address the security flaw of being able to forward envelope email notifications to someone else. Forwarding the email allows this person to sign on behalf of the intended signer.
Existing setting: “Prevent users from forwarding completed envelopes”
New setting: “Prevent users from forwarding envelopes’
If this forwarding allowance is a requirement of being able to delegate another signer, perhaps they should be tied together:
Existing setting: “Allow recipients to change signing responsibility”
New setting: “Allow recipients to change signing responsibility and forward envelopes” - leaving this blank would produce an error if the user tried to open a forwarded envelope.
The solutions I’ve read for this to ‘simply add ID verification’ is not a viable solution because this cannot be enforced at the global account level. There’s too much responsibility on the sender and we’re not ready to retrain the entire organization to always add Access Codes.
Back to Docusign.com

