Electronic Signatures
Electronic signatures provide proof of a decision. You can set up electronic signatures to be used for Certifications, Policy Violations, and Approvals. Use the Electronic Signatures page to set the meaning or text that is displayed to the end user when they perform an electronic signature.
Warning: Electronic Signatures have legal implications. They should explicitly state each action and consequence, to ensure that end users understand what they are signing.
Electronic Signature Meanings
The Electronic Signature Meanings page displays a table of configured meanings. Click New Meaning to open the New Electronic Signature Meaning window. Provide a Name, Display Name, and Meaning. The Meaning is the text of the electronic signature that the user will agree to when signing. Then click Save.
If your IdentityIQ instance is configured to support Multi-Language Descriptions, you can supply Meanings for the electronic signatures in any of the languages IdentityIQ is configured to support. For more information see the Multi-Languages Descriptions section in the Miscellaneous tab.
Electronic Signature Authentication
The method that end users will use for authenticating when they perform an electronic signature is determined by IdentityIQ's login configuration (under the gear menu > Global Settings > Login Configuration).
If SAML Based SSO is enabled and configured, the user performing an electronic signature will be routed to your SAML provider for authentication, then returned to the IdentityIQ UI to complete the signature. If you are using rule-based SSO for authentication to IdentityIQ, electronic signature uses an SSO rule to complete the electronic signature process. In other cases, basic authentication with the user's IdentityIQ credentials is used. See SSO Configuration.
Auditing SAML-Based Electronic Signatures
If SAML is enabled, SAML details for electronic signatures can be included in auditing. To enable this, check the Login option in the Audit Configuration. You can use Advanced Analytics to search for and view details about SAML authentication for electronic signatures, including the SAML Assertion ID, SAML Issue Instant, SAML Issuer, SAML NameID and Sign-Off Validity.
For more information about searching for audit records in Advanced Analytics, see Audit Search.