1 of 61

Enterprise Configurations

SigningHub lets an enterprise admin configure enterprise account settings. In this regard, the enterprise admin can manage enterprise profiles, registered users, enterprise contacts, enterprise groups, enterprise roles, enterprise templates, enterprise documents library, enterprise email notifications, enterprise branding, third-party integrations and advanced settings.

Set up your enterprise profile

To configure your enterprise profile:

Login with your enterprise admin credentials.
Click "Configuration" and click on "Enterprise Information" under About options in Enterprise Administration section.
Click on "Edit" button.
Specify your information as required and click "Save changes" button.

See the below table for fields description:

View your enterprise logs

SigningHub records high-level activities for each Enterprise Settings change along with the particular date and time stamps. The detailed insight is useful to provide an effective audit trail for monitoring any setting change in an Enterprise account. These logs will be available to those enterprise users/ administrators for which the in their role.

In this regard, the following activities are logged:

When you update enterprise profile
When you change a user role
When you delete a user
When you invite a user
When you import a CSV file to invite users
When you resend an invitation to a user
When you delete an invitation
When you register a single user
When you register bulk users
When you update Active Directory user settings
When you add a new role
When you update an existing role
When you delete an existing role
When you clone an existing role
When you add an enterprise contact
When you update an enterprise contact
When you delete an enterprise contact
When you import a CSV file to add enterprise contacts
When you add a new enterprise group
When you update an existing enterprise group
When you delete an existing enterprise group
When you add an enterprise template
When you update an enterprise template
When you delete an enterprise template
When you clone an enterprise template
When you upload/ add a document in enterprise library
When you update a document from enterprise library
When you delete a document from enterprise library
When you add an electronic seal
When you update an electronic seal
When you delete an electronic seal
When you disable two factor authentication (2FA)
When you regenerate two factor authentication (2FA) Recovery Codes
When you update a notification email
When you update a notification email content
When you reset a notification email to default
When you update application integration settings
When you update report settings
When you update document settings
When you add an enterprise legal notice
When you update an enterprise legal notice
When you delete an enterprise legal notice
When you add a certificate filter
When you update a certificate filter
When you delete a certificate filter
When you enable your enterprise user
When you disable your enterprise user
When you update the enterprise default settings
When you update enterprise branding
When you update webhooks

View your Enterprise Logs

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Logs" under About options in Enterprise Configurations section.
Click "Next" to view your older activity logs. The system will keep fetching the records accordingly. You can also view the associated information of each activity by clicking the respective "Activity".

Search your Enterprise Logs

You can search the enterprise logs on the basis of the relevant "User Name" or "User Email ID" from the top right "Filter".

Use the "Advanced Search" option

In case the enterprise logs are in bulk and its hard for you to reach out the exact instance, you can use the "Advanced Search" option. This will enable you to input multiple parameters to retrieve the exact record.

Click "Advanced search" button on top right of the grid.
Specify the available information in the respective fields in the dialogue and click the "Advanced search" button. The system will retrieve the enterprise logs by incorporating all the input parameters in the search.

Manage your enterprise contacts

SigningHub enables you to manage (Add, Edit, and Delete) a list of enterprise contacts to help make sending documents even easier. These enterprise contacts are available to all the enterprise users within your enterprise, when they need to add recipients in a template and/or in a document workflow. Also, when a new enterprise user's account is activated, s/he is automatically added in the enterprise contacts by SigningHub.

Add a new enterprise contact

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Contacts" under People options in Enterprise Configurations section.
Click "Add a contact" button on Contacts screen.
Fill the required information in the "Add a contact" dialogue and submit.

Edit your enterprise contact

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Contacts" under People options in Enterprise Configurations section.
Select the desired contact and click "Edit" button in right panel.
Fill in the desired information in the "Edit Contact" dialogue and submit.

Delete your enterprise contact(s)

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Contacts" under People options in Enterprise Configurations section.
Select the desired contact and click "Delete" button in right panel.
Click "Delete" in confirm dialogue.

The mobile number field against a contact is an optional field.

Import contacts via CSV file

SigningHub allows you to import contacts in bulk using a CSV file. The file must have the valid email addresses of each contact. This is a smart way for individuals and enterprise users to add multiple contacts into SigningHub through a single click. SigningHub supports:

The "Primary Email", "E-mail Address", and "Email Address", to read the email address from the CSV file.
The "Mobile Number" header to read the mobile number of the contacts.

Import enterprise contacts through a CSV file

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Contacts" under People options in Enterprise Configurations section.
Click "Bulk contacts" button.
Drop or upload csv file to "Bulk contacts" dialogue and submit.

All the contacts (with valid email addresses) that do not previously exist in your SigningHub account, will be added from the CSV file.

How to get a CSV file?

There are multiple ways to get a CSV file. You can create a CSV file using any word processing, database, spreadsheet or text edit applications. When creating a CSV file, the first row must be the header row that shows the field names for the file. Each subsequent row can then represent a unique user email id along with the user's names (i.e. first name and last name).

A CSV file should contain the following information:

"Email Address" to input user's email id. It is a mandatory column header.
"Last Name" to input user's last name. It is an optional column header.
"First Name" to input user's first name. It is an optional column header.
"Mobile Number" to input user's mobile number. It is an optional column header.

You can also export your contacts (in a CSV file) directly from Outlook, Thunderbird, or any other email service provider. Since SigningHub is mainly concerned with the email column header of a CSV file, therefore three types of headers are supported, i.e. Primary Email, E-mail Address, and Email Address.

You can edit any content inside a CSV file as required.
In case the contact names are specified in a CSV file (i.e. First Name and/ or Last Name), they will be populated accordingly in the name fields of a contact.
In case a contact name is not specified in any name field, then the contact username (portion of email address before the "@" symbol) will be shown as contact name.
The rest of the column headers inside a CSV file are not related to SigningHub, so they will be ignored when you import the file.

The CSV file being used to import contacts in bulk must have the valid email addresses of the contacts. SigningHub supports three different types of email headers for use in a CSV file, i.e. Primary Email, E-mail Address, and Email Address. You can export your contacts (to a CSV file) from Outlook, Thunderbird, or any other email service provider that supports these email headers.
To populate the contact's name field, SigningHub looks for the name fields within the CSV file, i.e. First Name and Last Name, and combines them. If the contact name is not specified, then the contact username (portion of email address before the "@" symbol) will be shown as contact name.
To populate the mobile number field, the "Mobile Number" header is supported with in the CSV file, for reading the mobile number of the contacts.

Manage your enterprise groups

SigningHub enables you to manage (Add, Edit, and Delete) enterprise groups for the group signing, group approving, and/ or group updating purposes. These enterprise groups are available to all the enterprise users within your enterprise, when they need to add recipients in a template and/or in a document workflow.

Create a new enterprise group

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Groups" under People options in Enterprise Configurations section.
Click "Add group" button on groups screen.
Provide "name" and "description" and click "Add member" button.
Enter name or email in the dialogue and after selecting the required contact, click "Add member".
Click "Save new group" button.

Edit your enterprise group

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Groups" under People options in Enterprise Configurations section.
Select the desired group and click "Edit" button in right panel.
Change the desired information and/or Add or remove member.
Click "Save changes" button.

Delete your enterprise group(s)

Login with your enterprise admin credentials.
Click "Configurations" in left menu and select "Groups" under People options in Enterprise Configurations section.
Select the desired group and click "Delete" button in right panel.
Click "Delete" on confirm dialogue.

Manage your enterprise users

SigningHub enables you to manage (Invite, register, update role, delete, change password, enable and disable, view activities and statistics) users' registrations for your enterprise. You can directly register your enterprise users, or may also invite them through emails. The users accepting your invitations are then brought into your enterprise as the registered enterprise users.

View your registered enterprise users

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
User detail screen will appear with all the information in respective tabs.

Registration States

Delete your enterprise user(s)

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
Select the user(s) you want to delete and click "Delete" button in right panel.
A dialog will appear to confirm the user(s) deletion activity.
1. Click the "Delete" button without selecting the "Delete user permanently" option to remove the selected enterprise user(s) from your enterprise account. SigningHub will transform these account(s) from enterprise user(s) to individual account(s) with the default (free) service plan.
2. Click the "Delete" button after selecting the "Delete user permanently" option to purge the selected enterprise user(s). SigningHub will permanently delete these accounts from system along with their transactions.

Download the records in excel sheet

You can export the enterprise users record to an excel sheet file (xlsx) by clicking "Export to excel" button. The excel sheet file is downloaded to your local Downloads folder.

When a new enterprise user's account is activated, SigningHub adds them in the Enterprise Contacts as well.
When an enterprise user's account is deleted, SigningHub converts the enterprise user account to an individual account with the default (free) service plan.

Register an enterprise user

SigningHub facilitates you to directly register any user into your enterprise without even following the default registration and activation steps. Once registered, you can enable/ disable the system access of your enterprise users as required. You can search the registered useers on the basis of their name/ email, and can also sort them in ascending or descending order as required.

System Access

User Status

Description

Directly register an enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
Click "Add a user" button.
Specify Name, Common Name, Email, Role, Mobile Number, Job TItle, Company Name, Language, Country, Remote Authorisation Signing ID, Cloud Signature Consortium (CSC) User ID, CSP Signing ID, Send Email, and the National ID of the enterprise user in the provided fields. Only the Name, Email and Common Name fields are the mandatory ones. The default role is automatically selected for the new registration, change it as required. Common Name is used for the certificate name that is issued against each registered user. The issued certificate identifies the user and their enterprise.
From the "Send Email" field, choose when to send the notification email to the newly added user:
- None: select this option when you want the user to be auto activated without receiving any email. This option is recommended when the user needs to use an external IDP (i.e. Active Directory, Salesforce, Linked-in, etc) for system authentication.
- Send Registration Email: select this option when you want the user to be auto activated without receiving the activation email. Only the registration email will be sent (to the user) that contains the information like Enterprise Admin name who has registered the user, and the Enterprise name in which the user has been registered. This option is recommended when the user needs to use an external IDP (i.e. Active Directory, Salesforce, Linked-in, etc) for system authentication.
- Send Activation Email: select this option when you want the user to receive the activation email and activate their account through it. This option is recommended when the user needs to use the SigningHub ID for system authentication.

National ID refers to a RUT/ RUN/ eID or any unique identifier of a user to identify them in SigningHub. This is an optional field and is used in addition to the user email ID. When specified, this identification will be available on the following areas:
1. The "General" section of User Profile
2. The "Registered Enterprise Users" screen
3. The Workflow screens related to recipient, i.e. Add Recipient, Update Recipient, Replace Recipient, etc.
4. The Template screens related to recipient adding and updating
5. The document viewer
6. The "Delegate Signing" screen
7. The "Advance Search" dialog of Enterprise Users
The activated users can also log into SigningHub with their non-SigningHub Ids, if it is allowed in their subscribed service plan.
The user name and their certificate name can be the same or different as required.
When the newly registered user tries to log into SigningHub by using the SigningHub ID, they will be sent an activation email to activate their account.

Register enterprise users via CSV file

You can register your enterprise users in bulk through a CSV file. The CSV file must have the valid email addresses of the contacts. SigningHub supports three different types of email headers (i.e. Primary Email, E-mail Address, and Email Address) to pick up the email addresses from a CSV file. This is a smart way for the enterprise admins to directly register multiple users into their enterprise account through a single click, without even following the default registration and activation steps. Moreover, you can also the system access of your enterprise users as required.

System Access

User Status

Description

Register the users through a CSV file

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
Click "Bulk register" button.
Select the role for all the users to be registered. The default role is automatically selected for the new registrations, change it as required.
From the "Send Email" field, choose when to send the notification email to the newly added user:
From the "Send Email" field, choose when to send the notification email to the newly added user:
- None: select this option when you want the user to be auto activated without receiving any email. This option is recommended when the user needs to use an external IDP (i.e. Active Directory, Salesforce, Linked-in, etc) for system authentication.
- Send Registration Email: select this option when you want the user to be auto activated without receiving the activation email. Only the registration email will be sent (to the user) that contains the information like Enterprise Admin name who has registered the user, and the Enterprise name in which the user has been registered. This option is recommended when the user needs to use an external IDP (i.e. Active Directory, Salesforce, Linked-in, etc) for system authentication.
- Send Activation Email: select this option when you want the user to receive the activation email and activate their account through it. This option is recommended when the user needs to use the SigningHub ID for system authentication.
Drag/Drop or select the required csv from system. All those users (with valid email addresses in the CSV file) that are not available in system, or available in system as guest, or have been marked as deleted, will be registered and auto activated in your enterprise with the enabled SigningHub access.
Click on "Submit" button.

How to get a CSV file?

"Email Address" to input user's email id. It is a mandatory column header.
"Last Name" to input user's last name. It is an optional column header.
"First Name" to input user's first name. It is an optional column header.

You can edit any content inside a CSV file as required.
In case the contact names are specified in a CSV file (i.e. First Name and/ or Last Name), they will be populated accordingly in the name fields of a contact.
In case a contact name is not specified in any name field, then the contact username (portion of email address before the "@" symbol) will be shown as contact name.
The rest of the column headers inside a CSV file are not related to SigningHub, so they will be ignored when you import the file.

The activated users can also log into SigningHub with their non-SigningHub Ids, if it is allowed in their subscribed service plan.
When the newly registered users try to log into SigningHub by using the SigningHub IDs, they will be sent the activation emails to activate their accounts.
When users are registered via CSV file, the user certificates are generated as per the user names, i.e. User name and their certificate name will be the same. However these names (User and Certificate) can be updated later as required.
The CSV file being used for registering the enterprise users in bulk must have the valid email addresses of the contacts. SigningHub supports three different types of email headers for a CSV file, i.e. Primary Email, E-mail Address, and Email Address. You can export your contacts (in CSV) from Outlook, Thunderbird, or any other email service provider that supports these email headers.
If the CSV file being used for registering the enterprise users in bulk has the Cloud Signature Consortium (CSC) User ID of the contacts, it will be extracted, given that the SigningHub supported header is used in the CSV file. SigningHub supported header for Cloud Signature Consortium (CSC) User ID is "CSC_ID".
While exporting contacts from different email clients (like Microsoft Outlook and Gmail) you often end up having different column headers for the same field. For example, Gmail has "Primary Email" for the Outlook's "Email Address" column header. You do not need to rename the CSV headers to conform because SigningHub supports such variations in the CSV column headers. These variations are correctly mapped with the SigningHub fields. The following table illustrates which SigningHub field maps with the corresponding CSV header along with supported variations. Note: Other than "Email" field, all the fields are optional.

Edit Enterprise User Details

At times people make typo mistakes while adding user information, or the details may require update after certain time period. SigningHub therefore allows an enterprise admin to edit/ update their enterprise users' information as required. You can edit user name, their mobile number, job title, and company name. Similarly, you can also change the role of your enterprise user anytime in order to update their system access.

Edit the details of your enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
Open "Profile Information" tab and click "Edit" button.
Fill in the detail as required. Since the "Email" field is used as user's SigningHub account ID, therefore it is not editable and is displayed as a read-only field.

Signing Certificates

Business applications can use this service API to add a certificate for Enterprise Users into their Enterprise account. An enterprise Admin who has permissions to manage enterprise users in this role, can import RAS (Remote Authorization Signing) enabled certificates for signing. Furthermore, the signing certificates appears at signing time (if RAS is enabled under service plan and under intended user's role). The Role dictates things such as allowed signing capacities available to the user.

SigningHub will provide an option to enterprise admin that will allow to add (import) / update / delete user certificates. Management of certificates will only be limited to those certificates that has been imported by Enterprise admin and not the ones which are generated by system. End user will get all signing certificates added by Enterprise admin or by system. Option will only appear if Enterprise has RAS enabled in service plan other than that Enterprise will not be able to manage user certificates.

Pre-requisite (for Client)

Add a Signing Certificate

Open "Add a Signing Certificate" tab and click "Add a Signing Certificate" button.
Fill the required information in the appeared dialogue.
Click "Save changes".

Capacity name should be user-friendly, that could consist of letters and numbers.
Capacity name should not be more than 100 characters.
Capacity name should be unique for each user i.e. capacities added by enterprise admin and provided by Service Plan shouldn't match.
Capacity Alias should be same as of provided in ADSS.
All conditions mentioned above must be fulfilled and needs to be filled by Enterprise Admin only.

Reset the password of your enterprise user

SigningHub lets you initiate the password changing process of your enterprise users. In this case, a password resetting email is sent to the respective enterprise user, from where they can change their account password.

Reset the password of your enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
Click "Reset password" button.

The respective enterprise user will be sent an email including the password change link. From where they can change their SigningHub account password.

SigningHub does not allow its users to set as password, the following:

Their user account (i.e. Email Address)
The last used password
Their full user name

Reset two factor of your enterprise user

Two factor authentication (2FA) strengthens access security by requiring two methods to verify your identity. SigningHub allows you to configure a Time based One Time Password (TOTP) under two factor authentication (2FA). A Time based One Time Password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. Time based One Time Passwords provide additional security as even if a user's traditional password is stolen or compromised, an attacker cannot gain access without the TOTP, which expires quickly. SigningHub allows the Enterprise Admin the option to reset the two factor authentication (2FA) configured against an enterprise user. The "Reset 2FA" option will only appear if the "Enable Time based One Time Password (TOTP)" option is enabled in the user's service plan, and the user has configured two factor authentication (2FA).

Reset 2FA of your enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
Click "Reset password" button.
Click "Yes" from the 2FA dialogue appear.

View activities of your enterprise users

SigningHub records the high-level activities of each user account along with particular date and time stamps, and other details to provide an effective audit trail. There are mainly five types of activities that are logged against each user, i.e. Account/ User, Document, Billing, Settings and Enterprise related activities, see details. You can view these activities of each user within your enterprise.

View the activities of your enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
Expand the "Activity" tab. Click on any and you can see the details in right panel.

Set service quota of your enterprise use

SigningHub allows you to configure a specific quota against each system resource/ service for your enterprise users on individual basis. This is useful to restrict them from abusing the system resources as allowed in your enterprise service plan. In this way, you can prevent your enterprise from being hijacked by a few individuals consuming the available resources.

Set service quota of your enterprise user

Login with your enterprise admin credentials.
Click on "Configuration" in left menu and click "Users" under People options in Enterprise Administration section. Users Screen will appear.
If you want to view further detail of your user, select the user and click "User preferences" button in right panel.
Expand "Usage and Limits" tab and you can configure the limits in numbers.
Click "Save changes" button.

Usage Statistics

"Simple Electronic Signatures" constraint option will only be displayed, if the "SIMPLE_ELECTRONIC_SIGNATURES" module enabled in the license.
In case a limit has been set for "Signatures" but unlimited has been checked against each level of assurance, the user will be allowed to use each level of assurance as long as their aggregate is less than the limit set for "Signatures".
The limit set for each level of assurance can not be greater than the limit set for "Signatures".

Invite an enterprise user

SigningHub enables you to invite users to your enterprise through emails. The users accepting your invitations are brought into your enterprise as the registered enterprise users. You can search the invitation records on the basis of user's name/ email, and can also sort them in ascending or descending order as required.

A user invitation can have three different statuses:

Invitation Status

User Status

Description

Invite users to your enterprise

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Click "Send an invitation" in "Invitations" section.
Specify Name, Email, and Role of the user in the provided fields. The default role is automatically selected for the invitee, change it as required.
Click the "Submit" button. An invitation email and web notification will be sent to the invitee with the account registration link.

In case registration is disabled at System level , invitation can not be send to non-register users.

Resend an invitation to the same user

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the user you want to resend invite to and click "Resend invite" from right panel. The invitation email will be resent to the user.

Delete your invitation(s)

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the user you want to resend invite to and click "Withdraw invite" from right panel.
Click "Withdraw" from the confirmation dialogue. SigningHub will invalidate the invitation link(s) that have been previously sent to the invited user(s).

Download the records in excel sheet

You can export the users invitations to an excel sheet file (xlsx) by clicking "Export to excel" available under "Invitations" section. The excel sheet file is downloaded to your local Downloads folder.

Invite enterprise users via CSV file

You can also invite your enterprise users in bulk through a CSV file. The CSV file must have the valid email addresses of the users. SigningHub supports three different types of email headers (i.e. Primary Email, E-mail Address, and Email Address) to pick up the email addresses from a CSV file. This is a smart way for the enterprise admins to invite multiple users to their enterprise account through a single click. The users accepting your invitations are brought into your enterprise as the registered enterprise users. You can search the invitation records on the basis of user's name/ email, and can also sort them in ascending or descending order as required.

A user invitation can have three different statuses:

User Status

Description

Invite users to your enterprise through a CSV file

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Click "Bulk invite" in "Invitations" section.
Select a role for all the users to be invited. The default role is automatically selected for the invitees, change it as required. The users accepting the invitations will have the same (this) role in the enterprise account.
Select the csv file and click "Submit".

All those users (with valid email addresses in the CSV file) that have not been previously invited, or have declined or have ignored the previous invitation, will be invited. An invitation email and web notification will be sent to each such invitee with the account registration link.

In case registration is disabled at System level , invitation can not be send to non-register users.

How to get a CSV file?

A CSV file should contain the following information:

"Email Address" to input user's email id. It is a mandatory column header.
"Last Name" to input user's last name. It is an optional column header.
"First Name" to input user's first name. It is an optional column header.

You can edit any content inside a CSV file as required.
In case the contact names are specified in a CSV file (i.e. First Name and/ or Last Name), they will be populated accordingly in the name fields of a contact.
In case a contact name is not specified in any name field, then the contact username (portion of email address before the "@" symbol) will be shown as contact name.
The rest of the column headers inside a CSV file are not related to SigningHub, so they will be ignored when you import the file.

Download the records in excel sheet

The CSV file being used for inviting the enterprise users in bulk must have the valid email addresses of the users. SigningHub supports three different types of email headers of a CSV file, i.e. Primary Email, E-mail Address, and Email Address. You can export your contacts (in CSV) from Outlook, Thunderbird, or any other email service provider that supports these email headers.

Pre-authorize users

When using an on-premises installation, SigningHub gives you an option to pre-authorise users in your Directory so that they may serve as your registered enterprise users. In this way, your enterprise users can use their Directory credentials (i.e. organizational domain user ID and password) for SigningHub authentication, and wont even need to create their SigningHub IDs.

Pre-authorise your users

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Tick the "Automatically register the users" check box.
The "Authentication Profile" field will appear, listing all the Active Directory Authentication Profiles and the Azure Active Directory Authentication Profiles configured in SigningHub Admin console. Select the required authentication profile from the list.
Click the "Save" button.

All the users that belong to the selected authentication profile will be authorised through Azure Active Directory upon Login, and will be automatically registered and activated in SigningHub under the default SigningHub role, provided that provisioning is not enabled by any other enterprise within the same on-premises deployment.

This implies, if multiple enterprises have been configured within an on-premises deployment, then the "Automatically register the users" check box should be ticked for only one enterprise.

You can also give the role based access of SigningHub (i.e. Enterprise Admin, or Enterprise Users, etc) at Security Group level. SigningHub allows you to manage (Add, Edit, and Delete) the Security Groups from the same screen.

Assign a custom role to a Security Group

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Click "Add a security group".
Specify a Group name.
Now, select a role to assign to this security group and click the "Submit" button. The default role is shown automatically selected for the security group, change it as required.

The added security group will be listed inside the Security Group grid. All the users that belong to the security group will be automatically registered and activated in SigningHub under the specified role.

Edit the assigned role of an Active Directory security group

Select the security group whose role is required to edit.
Click "Edit" in the right panel.
Select the role as required and click "Save changes".

Delete the assigned role and Active Directory security group association

Select the security group required to be deleted.
Click "Delete" from the right panel.
Click "Delete" in the confirmation dialogue.

When using Active Directory authentication for SigningHub Desktop Web, the users to be authenticated should be the part of the same domain where SigningHub has been deployed, e.g. if the users belong to the "Ascertia" domain, then SigningHub should also be deployed on the "Ascertia" domain.

Disable an enterprise user

By default all the enterprise users are registered in SigningHub with the enabled access. However, you can disable your enterprise users when required. The SigningHub access will be suspended with immediate effect for the disabled users, till they are enabled again.

Disable your enterprise user

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the user you want to disable and click "User preferences" in the right panel.
Switch-off the "Enabled" toggle.
The SigningHub access for this enterprise user will be suspended right away and it will be shown with a strike through line, as shown below:

Enable your disabled enterprise user

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the disabled user you want to enable and click "User preferences" in the right panel.
Switch-on the "Enabled" toggle. The SigningHub access for this enterprise user will be resumed right away.

When an enterprise user's access is disabled while they are using SigningHub, they are redirected to the SigningHub Login screen with immediate effect.

Search an enterprise user

SigningHub provides comprehensive search facility to search your enterprise users. You can either use the default search bar or go for advance search to retrieve an enterprise user from the list. The default search bar allows searching on the basis of user name or their email ID. While if your enterprise users are in bulk and its hard for you to find the required user, you can use combination of multiple parameters to reach the exact user. This input of multiple parameters is called advance searching.

Search your enterprise user

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Specify the name or email ID of your enterprise user in the search bar (shows up by clicking "Filter" button).

Use the advanced search option

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Click "Advanced search" button.
Specify the available information in the respective fields and click the "Search" button. SigningHub will retrieve the enterprise user by incorporating all the provided parameters in the search.

In case of specifying multiple search parameters, the search will be carried out by using AND operator(s) among all the parameters. This helps SigningHub to retrieve more targeted results.

Manage signing certificates

Add Custom Signing Certificate

An Enterprise Administrator with the permissions to manage enterprise users in his role, can import a custom certificate for signing. Furthermore, the signing certificates appear at the time of signing. The signing capacities appear on the signing dialog as per the capacities available in a user's role. Enterprise Roles are described in detail here.

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the desired user and click "User preferences" in right panel.
Expand "Add a Signing Certificate" tab and click "Add a Signing Certificate" button.
Provide the Capacity Name , Certificate Alias and Certificate (CER) for your certificate. Enable the "Mark as default" option if you want to display your certificate as selected by default in the signing dialog. Additionally, you can select Level of Assurance and Protect Keys Using Option too. Default selected value for Level of Assurance will be Advanced Electronic Signature and for Protect Keys Using it will be User Password.
Click "Save changes".

Only one capacity can be set as default at a time. If a capacity is already set as default, then setting a new capacity will revoke the previous as the default signing capacity.

Certificate Alias is a Unique Identifier for the signing certificate key and must be the same as provided in ADSS.
The Capacity Name should be unique, user-friendly (consisting of letters and digits) and must not exceed 100 characters.

Edit Signing Certificate

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the desired user and click "User preferences" in right panel.
Under "Add a Signing Certificate" tab, click on the desired certificate and click "Edit" in the right panel.
You can update Capacity Name, Certificate Alias, Certificate (CER) and Level of Assurance for your certificate. Click on the Set as default option if you want to display your certificate as selected by default in the signing dialog.
Click "Save changes" button.

Delete Signing Certificate

Login with your enterprise admin credentials.
Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
Select the desired user and click "User preferences" in right panel.
Under "Add a Signing Certificate" tab, click on the desired certificate and click "Remove" in the right panel.
Click "Delete" in the confirmation dialogue.

Manage your user roles

When you purchase an enterprise account of SigningHub, a default Enterprise Admin user is provided to you, having all the privileges and access in your SigningHub account. You can use the credentials of your Enterprise Admin to configure the role based granular access (i.e. read, add/ edit, and delete access on different modules/ sub modules of the system) for your enterprise users. You can even create multiple Enterprise Admins as required. When a new Enterprise is created, two roles will also be created in the Enterprise: Enterprise Admins and Enterprise Users. The Enterprise Users role is marked as "default", which means whenever a new user will be created in this Enterprise, the default role will automatically get assigned to the user. However, you can always modify which role should be the default. Remember, only one role can be marked as "default". In addition, you can also add new roles under this Enterprise. Read on to know what more you can do on this page. From here, you can manage (Add, Clone, Edit, and Delete) different roles and can assign them to your enterprise users and external users, in order to provide them custom access in the system. However you cannot delete a role, as long as it is assigned to any user within your enterprise or to external user of third party integration.

Create a new role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Click "Add Role" button.
Add a New Role dialogue will appear. Provide name and description and click "Add role" button to continue.
Fill in all the information in the respective sections.
Click "Save changes" button. Now assign this role to your enterprise user to give them configured access, see Manage your enterprise users.

Make an existing role as "Default" role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the desired role and click "Mark Default" button in right panel.

Make a clone of your enterprise role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the desired role and click "Clone" button in right panel.
"Clone Role" dialogue will appear. Specify name of the clonal role and its description as required. The clonal role name must be different than the original role name. If you want to make the clonal role as default in your enterprise, tick the "Mark default" check box. SigningHub assigns the default role to those enterprise users, for which Enterprise Admin did not specify any role. The default role is also automatically selected when inviting the enterprise users.

Edit an existing role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the desired role and click "Edit" button in right panel.
Role screen will appear. Edit the required tabs and click "Save changes".

Delete an existing role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the desired role and click "Delete" button in right panel. Please note, you cannot delete a role that is assigned to any user within your enterprise or in third party integration.
Click "Delete" on confirm dialogue.

As a security consideration, always assign least privileges to a default users role. SigningHub assigns the default role to those enterprise users, for which Enterprise Admin did not specify any role. Similarly, the default role is automatically selected when inviting the enterprise users.
When you update a role, the saved changes are available to the related enterprise users on their next login.
You cannot downgrade all the Enterprise Admins to Enterprise Users. SigningHub will ensure that at least one Enterprise Admin must be under Enterprise Admin role to manage all the account related configurations.

Basic information

The tab lets you configure basic information as well as authentication settings. Basic information consists of role name, description and whether it'll be default for new users or not. The Login Authentication lets you configure a private authentication method in a role. This method is specifically used for the login authentication of your enterprise users, and will not be available to public users under the "More Login Options" link of login screen. At the time of login, SigningHub will check the IDs of your enterprise users and allow them to only authenticate themselves through the private method configured in their role. However they can also login by using "More Login Options" link, if you allow them to use public authentication methods.

Configure basic information in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Basic Information". Configure the basic information as required.
Click "Save changes".

See the description in the "Basic Information" table below.

Basic Information

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Basic Information". Configure the authentication settings as required.
Click "Save changes".

See the description in the "Authentication Preferences" table below.

Authentication Preferences

When you update a role in a production environment, the saved changes are available to the related users on their next login.
A private authentication profile is the one that is exclusively used for corporate logins and is not available to the end users (public) on their Login screen and Integration screen of SigningHub Desktop Web.
The availability of private authentication profiles, is subject to your subscribed service plan. If you cannot find this option in your account, upgrade your enterprise service plan. The availability of Time based One Time Password, and One Time Password as a secondary authentication method is subject to your subscribed service plan.
Once the enterprise administrator enforces Time based One Time Password as a secondary authentication method on to a role, and a user under that role does not have two factor authentication (2FA) configured at the time of login, they will be sent an email to set up and to provide a Time based One Time Password. If the user has already configured two factor authentication (2FA) they will be prompted to provide the Time based One Time Password from the authenticator app configured on their mobile device.
To configure the two factor authentication (2FA) the user will need to install an authenticator app (Google Authenticator, Microsoft Authenticator, etc.) on their mobile device. The email sent to the user to configure two factor authentication (2FA) will contain:
1. QR Code
2. Manual Key
3. Recovery Codes
To set up, the user can either scan the "QR Code" or manually input the "Manual Key" in the Authenticator app. Once the registration is successful, the user can provide the automatically generated Time based One Time Password from the Authenticator app to SigningHub in order to proceed. The list of recovery codes included in the configuration email can be used in place of a Time based One Time Password, once each recovery code, to regain access to your SigningHub account, in case you lose access to your mobile device. It is advised to save the recovery codes in a safe place. The user can however, regenerate a new list of the recovery codes from the Manage Two Factor Authentication (2FA) option. In case enterprise user loses access to your mobile device and recovery codes, or have used all of the recovery codes, you can ask your enterprise admin to reset the two factor authentication (2FA) against your account.

User access preferences

The User Access Preferences tab lets you configure the usability related SigningHub modules in a role. You can select your choice modules from the list to make them available to your enterprise users (registered with this role) for navigation. SigningHub supports granular access management along with their fine grained authorization, i.e. read, add/ edit, and delete access on different modules/ sub modules of the system.

Configure user access preferences in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "User Access Preferences". Select the user settings check boxes and their respective granular access as required.
Click "Save changes".

See the description in the "User Access Preferences" table below.

User Access Preferences

Enterprise access preferences

The Enterprise Access Preferences tab lets you configure the account administration related SigningHub modules in a role. You can select your choice modules from the list to make them available to your enterprise users/ admins (registered with this role) for navigation. SigningHub supports granular access management along with their fine grained authorization, i.e. read, add/ edit, and delete access on different modules/ sub modules of the system.

Configure enterprise access preferences in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Enterprise Access Preferences". Select the user settings check boxes and their respective granular access as required.
Click "Save changes".

See the description in the "Enterprise Access Preferences" table below.

Enterprise Access Preferences

When you update a role in a production environment, the saved changes are available to the related users on their next login.
By default, the "Advanced Enterprise Reports" option will be disabled for all existing user roles.
The "Advanced Reports" will only be visible to the enterprise owner, and its child users (if the "Advanced Enterprise Reports" configuration is allowed against their role).

Document preferences

The Document Preferences tab lets you configure documents related settings in a role. From here you can set the privileges for the document owners and recipients (within your enterprise) registered with this role, and may also configure document related provisions available within integration mode (i.e., iFrame). The concept of shared spaces has been introduced which allows delegating your document processing authority to a group of users, configure it as required. It also provides a team working environment, where the peers have the same set of privileges inside a space and can process the team documents accordingly.

Configure document preferences in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Document Preferences". Select the user settings check boxes and their respective granular access as required.
Click "Save changes".

See the description in the "Document Preferences" table below.

Document Preferences

The enterprise admin who is willing to upload and share documents on behalf of their enterprise users, must have the "Application Integration" rights in their assigned role.
The "Template Applying", "Package Renaming", "Document Renaming", "Documents Merging", and "Documents Managing" options will not be available in the integration mode (i.e., iFrame), irrespective of their role settings.
When you update a role in a production environment, the saved changes are applicable to the related users on their next login.
The availability of "Bulk Signing and Sharing" provision is subject to your subscribed service plan. If you cannot find this option in your account, upgrade your service plan.
In the "Level of Assurance" field under the "Allowed Signature Fields" section, the names of the Levels of Assurance are displayed as configured in the SigningHub Admin.
In addition, this field displays all the Levels of Assurance available in the SigningHub Admin. The "Only share with your enterprise contacts and groups" and the "Allow users to only use personal contacts and groups" options can not be checked simultaneously. If either one of the checkbox is checked, and the user tries to check the other one, the system will prompt an error
.
In case the "Allow users to only use personal contacts and groups" checkbox is checked, only personal contacts and groups will be visible to the user while:
1. Starting a workflow
2. Changing a recipient
3. Adding a collaborator for the workflow
4. Adding a collaborator in the template
5. Adding a collaborator in the shared space
6. Configuring delegated signing
7. Configuring the delegate settings; for the delegator and the gatekeeper
8. Personal groups
9. Configuring the personal groups; the system will hide the enterprise dropdown from personal groups.
10. Configuring the personal contacts; the system will hide the enterprise dropdown from personal contacts.
11. Configuring post processing
The system will show the user name of a configured contact by checking the email address in the personal contacts, if the contact does not exist in personal contacts, then the system will show, as user name, the name set by the contact itself in their "My Settings".
If the "Set Document Access Authentication for all recipients" option is selected against the document owner's user role, the document owner will not be allowed to share the workflow until "Document Access Authentication" is set for all the recipient in the workflow.
If the "Set Document Signing Authentication for all recipients" option is selected against the document owner's user role, the document owner will not be allowed to share the workflow until "Document Signing Authentication" is set for all the recipient in the workflow.PreferencesPreferences

Template and library document preferences

The tab lets you configure which templates and library documents will be accessible by the role.

Configure allowed templates in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Template and Library Document Preferences".
In "Allowed Templates" section, enable toggle adjacent to the template you want to allow to be accessible.
You can use "Filter" to search, "Show" drop-down to manage which templates to show and "Disable All" and "Enable All" buttons to manage templates.

Configure allowed library documents in a role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Template and Library Document Preferences".
In "Allowed Templates" section, enable toggle adjacent to the template you want to allow to be accessible.
You can use "Filter" to search, "Show" drop-down to manage which templates to show and "Disable All" and "Enable All" buttons to manage templates.

Signature preferences

Signature settings are all about configuring the allowed signing methods (i.e., Server-side Signing, Client-side (Local) Signing, and/or Mobile Signing), authentication methods (i.e., No Authentication, OTP via SMS, SigningHub ID, Microsoft Active Directory, Salesforce, Freja eID etc.) and signing capacities in a role. You can separately configure these settings for web browsers and mobile apps, and choose a default signing method for each case. You can also configure Remote Authorized Signing here, which allows a user to authorize a remote signature (done on the server) using their registered mobile device. The device will have its user authentication built-in (touchID or PIN), so in a way they can also configure two-factor authentication. Furthermore, this section lets you manage signing reasons, which are used in the Signature Appearance, and become a permanent part of a PDF signature. The signing reasons can optionally be displayed in the signed PDF document.

Configure Signature Preferences in a Role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration section.
Select the role to edit and click "Edit Role" in right panel. Role screen will appear for re-configurations.
Click "Document Preferences" and "Signing Server Preferences" and configure desired setting.
Click "Save changes".

Signature Settings

Signing server preferences

Add Signature Server in a Role

Login with your enterprise admin credentials.
Click "Configuration" in left menu.
Choose "Roles" under People options in Enterprise Administration.
Search and select the desired role and click on "Edit" button in left panel.
Expand "Signature Server Preferences" tab and click "Add a Signing Server".
Configure the settings as required.
Click "Done" button.

See below table for description.

When a new signing server is configured in the user role, it will fetch any signature appearance configurations set against the signing server in the service plan, if any.
When a new enterprise user is registered, if a signature appearance was set against this signing server in the service plan, against the user's role, it will be selected as the "Signature Appearance", by default.
Upon changing the selected signature appearance, any uploaded logo will be removed as well.
The "Signature Appearance" field appears for both; server-side signing servers, and local-side signing servers.

Same authentication is applied on Electronic Seal (eSeal), Advanced Electronic Seal (AdESeal) and Qualified Electronic Seal (QESeal) though it will generate different certificates accordingly. Therefore, if you have selected the signing capacities of Electronic Seal (eSeal), Advanced Electronic Seal (AdESeal) and Qualified Electronic Seal (QESeal), then on this screen you will see them bundled as a single authentication.

Signing Servers to be configured under enterprise roles, are subject to your assigned enterprise service plan and only those signing servers will be available under enterprise roles that are configured in your service plan.
When adding a Signing Server for CSC, there is no signing capacities or level of assurance related information appears.
When adding a Signing Server for Client Held Keys using either ADSS or CSC, there will be no further options appears.
The availability of Time based One Time Password, and One Time Password as a secondary authentication method is subject to your subscribed service plan.
Once the enterprise administrator enforces Time based One Time Password as a secondary authentication method for a signing server against a role, and a user under that role does not have two factor authentication (2FA) configured at the time of signing with that signing server, they will be sent an email to set up and to provide a Time based One Time Password. If the user has already configured two factor authentication (2FA) they will be prompted to provide the Time based One Time Password from the authenticator app configured on their mobile device.
To configure the two factor authentication (2FA) the user will need to install an authenticator app (Google Authenticator, Microsoft Authenticator, etc.) on their mobile device. The email sent to the user to configure two factor authentication (2FA) will contain:
- QR Code
- Manual Key
- Recovery Codes

To set up, the user can either scan the "QR Code" or manually input the "Manual Key" in the Authenticator app. Once the registration is successful, the user can provide the automatically generated Time based One Time Password from the Authenticator app to SigningHub in order to proceed. The list of recovery codes included in the configuration email can be used in place of a Time based One Time Password, once each recovery code, to regain access to your SigningHub account, in case you lose access to your mobile device. It is advised to save the recovery codes in a safe place. The user can however, regenerate a new list of the recovery codes from the Manage Two Factor Authentication (2FA) option. In case enterprise user loses access to your mobile device and recovery codes, or have used all of the recovery codes, you can ask your enterprise admin to reset the two factor authentication (2FA) against your account.

Authentication Methods:

When the "Key Protection Option" option is set to 'System Password' (i.e., Sole Control is off) in certification profiles under SigningHub Admin configurations, SigningHub gives you the provision to choose a third-party authentication option for your enterprise users. You may select any of the following 15 options; through which your enterprise users can authenticate themselves for server-side signing.

No Authentication:

Select this option to let your enterprise users sign their documents directly without any authentication. In this case, their server based certificate will be used for signing but system will not prompt for any password or OTP.

SigningHub ID:

Select this option to allow enterprise users to use their SigningHub account password to sign their documents.

Microsoft Active Directory:

Select this option to allow enterprise users to use their Active Directory credentials to sign their documents. SigningHub will require their user ID (as registered in the organisational Active Directory) and domain password for the signing activity. you can authenticate using your Active Directory credentials at the time of signing having a different email address and vice versa.

Microsoft ADFS:

Select this option to allow enterprise users to use their ADFS credentials to sign their documents. SigningHub will require their user ID (as registered in cloud ADFS) and domain password for the signing activity. you can authenticate using your ADFS credentials at the time of signing having a different email address and vice versa.

Microsoft Office 365:

Select this option to allow enterprise users to use their Microsoft Office 365 credentials to sign their documents. SigningHub will require their Office 365 credentials (ID and password) for the signing activity. In case your enterprise user has logged in through SigningHub ID and want to sign through Microsoft Office 365 credentials, then their SigningHub ID (email address) and Office 365 ID (email address) must be the same.

Salesforce:

Select this option to allow enterprise users to use their Salesforce credentials to sign their documents. SigningHub will require their Salesforce credentials (ID and password) for the signing activity. you can authenticate using your Salesforce credentials at the time of signing having a different email address and vice versa.

LinkedIn:

Select this option to allow enterprise users to use their LinkedIn credentials to sign their documents. SigningHub will require their LinkedIn credentials (ID and password) for the signing activity. you can authenticate using your LinkedIn credentials at the time of signing having a different email address and vice versa.

Google:

Select this option to allow enterprise users to use their Google credentials to sign their documents. SigningHub will require their Google credentials (ID and password) for the signing activity. you can authenticate using your Google credentials at the time of signing having a different email address and vice versa.

Freja eID:

Select this option to allow your enterprise users to use their Freja eID authentication to sign their documents. Whenever, your enterprise user attempts to sign a document, a signing request will be sent to their mobile device running the Freja eID app. Upon confirmation from the Freja eID app, the document will be signed.

Authorisation via Mobile App:

Select this option as the Authentication Method to allow your enterprise users to use remote authorised signing provision. This option will only appear for the capacities that has Qualified Electronic Signature (QES) configured as the level of assurance and appears under 'Signing Capacities for Remote Authorization (Owned by User)' category.

OAuth2:

Select this option to allow enterprise users to use your IDP credentials (OAuth2 supported protocol) to sign their documents. SigningHub will require their IDP credentials (ID and password) for the signing activity. you can authenticate using your IDP credentials at the time of signing having a different email address and vice versa.

OIDC:

Select this option to allow enterprise users to use your IDP credentials (OIDC supported protocol) to sign their documents. SigningHub will require their IDP credentials (ID and password) for the signing activity. you can authenticate using your IDP credentials at the time of signing having a different email address and vice versa.

When you update a role in a production environment, the saved changes are applicable to the related users on their next login.
The drop-down list of "Authentication Method" (i.e., SigningHub ID, Salesforce, Microsoft Active Directory, LinkedIn, Google, Bank ID etc.) in server-side signing, depends on the key protection option under your certification profiles. If you are unable to find the required authentication method in the list; contact support.
The availability of configuring "OTP via SMS" is subject to your subscribed service plan. If you are unable to find this option in your account; upgrade your service plan.
"Authorisation via Mobile App" is subject to your signing profile that is configured in your service plan. If there is a signing capacity added for remote authorisation signing under your singing profile then these capacities will appear under signature settings under the label 'Signing Capacities for Remote Authorisation (Owner by User). If you are unable to find this option in your account; contact support.

Manage your enterprise documents

As a matter of super admin control, SigningHub allows you to keep an eye on all the documents within your enterprise and take appropriate actions against them as required. The documents are listed from document owners' perspective, which implies you can see the workflow progress of documents (i.e. Draft, In-Progress, Pending, Completed, and Declined) that an enterprise user owns.

However to comply with the security and integrity standards, SigningHub wont allow you to open and view any enterprise document that is not related to you. You can only take the following actions against your enterprise documents:

The documents screen provides the search and sort facility to easily locate the required documents, and also enables you to filter your enterprise documents list on the basis of up-mentioned statuses.

View all documents of your enterprise

SigningHub allows you to keep an eye on all the documents within your enterprise and take appropriate actions against them as required. The documents are listed from document owners' perspective, which implies you can see the workflow progress of documents (i.e. Draft, In-Progress, Pending, Completed, and Declined) that an enterprise user owns.

However to comply with the security and integrity standards, SigningHub wont allow you to open and view any enterprise document that is not related to you.

View all documents of your enterprise

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Documents" under Documents & Signing options in Enterprise Configurations section.
All the document packages within your enterprise will be listed in their respective statuses. Click on any document to see further details.

Documents Listing

Here is the basic set of information associated with each enterprise document(s) package in the list:

Names of documents separated by commas in a package.
Current status of document(s) package.
Name and email address of document(s) package's owner.
Size of document(s) package.
Date on which document(s) package was last modified, i.e. shared, form filled, signed, declined, etc.
Click "Manage recipients" to access the "Workflow" dialog that displays the workflow information i.e. full list of recipients along with their email address, role, collaboration sequence, and processing status (i.e. done, undone, or declined). In addition, you can also update the placeholders for the recipients.

Export the metadata of your enterprise documents

You can export the metadata related to your enterprise documents in the .xlsx format. The downloaded file will contain the following information about the enterprise documents; Package ID, Title, Owner Name, Owner Email, Date Created, Last Modified, Workflow Type, Status, and the Size. To export the metadata information:

Click on the "Export to excel" button and the .xlsx file containing the metadata of all your enterprise documents will be downloaded.

Use the "Advanced Search" option

Click "Advanced search" button. The "Advanced Search" dialog will appear.
Specify the available information in the respective fields and click the "Search" button. SigningHub will retrieve the documents by incorporating all the provided parameters in the search.

In the "Owner" field, a user could enter either the name or the email of the document owner. All the documents containing the searched keyword, as the document owner, will be listed.
In the "Recipient" field, a user could search for a document using either the name or the email of the recipient. All the documents containing the searched keyword, as a recipient, will be listed.

Status based filtration of your documents

By default all your enterprise document(s) packages are listed in the grid. You can filter them out on the basis of the "Draft", "In-Progress", "Pending", "Completed", and "Declined" statuses.

Pagination

By default up to 10 document packages are displayed in the main grid. Click next to view more enterprise documents in the list accordingly. The system will keep fetching the ending records accordingly. The system will also show the count of displayed and existing (total) documents at the bottom of the grid.

View workflow details of your enterprise documents

SigningHub allows the Enterprise Admin to access the enterprise documents, if you want to view your enterprise documents, go to the enterprise documents listing. SigningHub maintains a log of each action being performed on a document along with the respective date and time stamps. The "Workflow Details" dialog which presents the logs of each action being performed consists of two tabs; "Workflow History" and "Workflow Timeline". However, viewing "Workflow Details" is subject to your assigned enterprise user role. These logs are only available to the respective Enterprise Admin.

Workflow History

The following document actions are logged under "Workflow History":

When was the document uploaded by a user
When was the document added from library by a user
When was the document added from cloud by a user
The original format of the uploaded document
When the document was converted to pdf format after upload
When was the document opened by a user
When was the document closed by a user
When was the contact added in the document by a user
When was the comment added in the document by a user
When was an attachment added in the document by a user
When was a text field added in the document by a user
When was a form field filled in the document by a user
When was a form field text updated in the document by a user
When was the document initials were filled by a user
When was the document signed In-person by a user
When was the document signed by a user
The signing capacity with which a user signed the document
The signing reason for signing the document
When was the document shared by a user
When was the document recalled by a user
When was the document approved by a user
When was the document updated by a user
When was the document hosted for in-person signatures by a user
When was the post processing activity done on the document by a user
When was the document declined by a user
When was the document renamed by a user
When was the document deleted by a user
When was the document printed by a user
When was the document added in the library by a user
When was the document downloaded by a user
When was the document template added by a user
When was the document template applied by a user
When was the document workflow completed by a user
When was the document workflow updated by a user
When was the attached legal notice accepted by a user

Workflow Timeline

The following document details are logged:

Who was the document shared with
When was the document shared
Who processed the document (signer, reviewer, editor, delegator, meeting host, gatekeeper)
When was the document processed
The time taken by the recipient to process the document
Total time taken to process the document
When was the document recalled by the user

View workflow details of an enterprise document

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Documents" under Documents & Signing options in Enterprise Configurations section.
Select the document package to view its details and click "Signing details" in right panel.
Click "History".
The history will be displayed in right panel.

Manage recipients of your enterprise documents

When an In-Progress workflow has reached a stalemate in your enterprise because the next configured recipient is unresponsive, SigningHub gives you authority to either:

Change that recipient and/ or
Send them a reminder

Because of the super admin control, it does not matter whether the "" permissions on the document are allowed or not. In case you select the "Manage Recipient" option, all the for the previous recipient (by their document owner) will be transferred to the new recipient, along with the predefined workflow role (i.e. signer, reviewer, editor, or meeting host).

Change recipient of an enterprise document

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Documents" under Documents & Signing options in Enterprise Configurations section.
Select the desired document package and click "Manage recipients" in right panel.
A dialog will appear, showing the list of configured recipients in an editable mode. Click edit icon.
A new dialogue will appear. Specify the name(s) or National ID(s) of other recipient(s) that are added in your SigningHub contacts list as required, and the email/mobile number will automatically be updated in the adjacent fields.
Click "Save changes" button.

Send a reminder to the next recipient in a workflow

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Documents" under Documents & Signing options in Enterprise Configurations section.
Select the desired document package and click "Manage recipients" in right panel.
A dialog will appear, showing the list of configured recipients in an editable mode. Click reminder icon being displayed adjacent to the next configured (first) recipient.
A confirmation dialogue will be displayed, click yes.

You can only change the recipients but not their roles in the workflow. This implies that a signer can be changed with another signer, a reviewer can be changed with another reviewer, and so on.
The pre-configured special privileges (i.e. printing, downloading, adding text, accessing securities like password, OTP, time duration, etc.) as set by the document owner cannot be changed. These settings will be transferred to the new recipient as it is.

Send workflow completion report of an enterprise document

Login with your enterprise admin credentials.
Click "Configurations" in left menu and click "Documents" under Documents & Signing options in Enterprise Configurations section.
Select the desired document package and click "Send the workflow completion report" in right panel.
A confirmation message will be displayed. Click Yes, and the workflow completion report will be published at the Server URL configured in the "Workflow Completion Report" section of the .