Back to Docusign.com
As a financial institution, we face many impostors trying to orchestrate account takeovers. We are using Maestro for profile/account update workflows (without envelopes), which exposes us to risk when instances are left open with unlimited identity verification attempts and no time limit for completion.
It would be best if we had expiration rules for each workflow so that we can limit the use of the workflow to a reasonable time-period. Further, we cannot retire old workflows without manually stopping all open instances, which is an entirely separate issue.
Our other request would be to limit the number of attempts in IAM, or to have a way to limit the number of times that a phone number or email can be invited to the same workflow in a given time period.
