Integrating SailPoint with YouSign
YouSign is a cloud-based electronic signature and digital trust platform for organizations that need to send, track, and legally complete document signing workflows. It combines Signature Requests, document and field preparation, signer/approver/follower recipient management, templates, workspaces, electronic seals, and identity and document verification into a single platform, providing visibility into signing progress from draft through completion. This document provides instructions to configure a new direct connection to a YouSign source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The YouSign connector supports the following:
Account Management
- Aggregate Users
Entitlement Management
- Aggregate Roles
Note
User role is captured as part of account aggregation (embedded within the user record via the role attribute), so a separate entitlement aggregation is not required.
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before you configure the YouSign connector, ensure the following requirements are met:
- Sign in to the Yousign web application with a user holding the Admin or Owner role. Only these roles can view or create API keys.
- Go to the API section and open the API keys page. If your organization is still on the free API trial, start the API trial period first.
- Create an API key and set the following, as prompted by Yousign:
- Description - a clear, unique label.
- Environment -
SandboxorProduction. - Scope -
organization(access to data across the entire Yousign Organization) orworkspace(access limited to the selected Workspaces). - Permissions -
Read-Only. The source only issuesGETrequests.
- Copy the API key value at creation time and store it securely.
- Copy and securely store the following details, which are required during configuration:
- API Token - the Yousign API key value, without the
Bearerprefix - Base URL
- API Token - the Yousign API key value, without the
Note
- Yousign API keys are created and owned at the Organization level and are not tied to a personal login session, but only Admin and Owner users can create them. A Member cannot view or create any key.
- An organization can hold up to 200 active API keys across all scopes and environments. Customers on the Scale plan can request a higher quota from Yousign customer support.
- Users are a "Common" resource in Yousign, meaning the same user records are shared between the Sandbox and Production environments. However, in Sandbox mode Common resources are read-only. Because this connector only reads Users, a Sandbox key is functional for aggregation.
- Revoking or rotating the key immediately invalidates it. Reconfigure the source with the new key before the next aggregation runs.
- Yousign is rebranding to Youtrust, and its developer documentation now uses "Youtrust" in much of its page text while continuing to serve the API from
yousign.apphosts. This connector, its source type, and this page use the name YouSign.
Required Permissions
Typical Roles That Can Generate Tokens
Yousign's User roles are Owner, Admin, and Member. Access to API keys follows those roles:
| Role | Organization-scoped keys | Workspace-scoped keys |
|---|---|---|
| Member | Cannot view or create | Cannot view or create |
| Admin | Can view and create (all keys) | Can view and create, limited to Workspaces the Admin belongs to |
| Owner | Can view and create (all keys) | Can view and create (all keys) |
For more detailed information on obtaining an API key, refer to the official Yousign documentation.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.