# Integrating SailPoint with YouSign

YouSign is a cloud-based electronic signature and digital trust platform for organizations that need to send, track, and legally complete document signing workflows. It combines Signature Requests, document and field preparation, signer/approver/follower recipient management, templates, workspaces, electronic seals, and identity and document verification into a single platform, providing visibility into signing progress from draft through completion. This document provides instructions to configure a new direct connection to a YouSign source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The YouSign connector supports the following:

### Account Management

- Aggregate Users

### Entitlement Management

- Aggregate Roles

> [!NOTE]
>
> User role is captured as part of account aggregation (embedded within the user record via the `role` attribute), so a separate entitlement aggregation is not required.

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Before you configure the YouSign connector, ensure the following requirements are met:

1. Sign in to the Yousign web application with a user holding the **Admin** or **Owner** role. Only these roles can view or create API keys.
2. Go to the **API** section and open the **API keys** page. If your organization is still on the free API trial, start the API trial period first.
3. Create an API key and set the following, as prompted by Yousign:

   - **Description** - a clear, unique label.
   - **Environment** - `Sandbox` or `Production`.
   - **Scope** - `organization` (access to data across the entire Yousign Organization) or `workspace` (access limited to the selected Workspaces).
   - **Permissions** - `Read-Only`. The source only issues `GET` requests.
4. Copy the API key value at creation time and store it securely.
5. Copy and securely store the following details, which are required during configuration:

   - **API Token** - the Yousign API key value, without the `Bearer` prefix
   - **Base URL**

> [!NOTE]
>
> - Yousign API keys are created and owned at the Organization level and are not tied to a personal login session, but only Admin and Owner users can create them. A Member cannot view or create any key.
> - An organization can hold up to 200 active API keys across all scopes and environments. Customers on the Scale plan can request a higher quota from Yousign customer support.
> - Users are a "Common" resource in Yousign, meaning the same user records are shared between the Sandbox and Production environments. However, in Sandbox mode Common resources are read-only. Because this connector only reads Users, a Sandbox key is functional for aggregation.
> - Revoking or rotating the key immediately invalidates it. Reconfigure the source with the new key before the next aggregation runs.
> - Yousign is rebranding to Youtrust, and its developer documentation now uses "Youtrust" in much of its page text while continuing to serve the API from `yousign.app` hosts. This connector, its source type, and this page use the name YouSign.

## Required Permissions

### Typical Roles That Can Generate Tokens

Yousign's User roles are Owner, Admin, and Member. Access to API keys follows those roles:

| Role | Organization-scoped keys | Workspace-scoped keys |
| --- | --- | --- |
| Member | Cannot view or create | Cannot view or create |
| Admin | Can view and create (all keys) | Can view and create, limited to Workspaces the Admin belongs to |
| Owner | Can view and create (all keys) | Can view and create (all keys) |

For more detailed information on obtaining an API key, refer to the official [Yousign documentation](<https://developers.yousign.com/docs/api-keys>).

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.