Preselect digital ID providers

Digital ID Provider (IdP) Preselection allows the account or group admin to identify which IdPs are acceptable when recipients are signing your documents.

A full list of the available Cloud-based Digital ID Providers is listed for the admin to enable.

Admins can define different settings for internal recipients vs external recipients.

Admins can define a preferred vendor for their internal recipients.

Signers are only able to successfully sign using a Digital ID provided through an enabled IdP.

If only one provider is permitted, the signer skips the selection process, and is delivered directly to the approved IdPs authentication process.

Companies that have a relationship with a restricted IdP (eg: BankID) can provide their Account ID to their vendor, and have that IdP enabled for their recipients

When your account or group is configured to accept cloud-based digital signatures, a list of the available identity providers is listed.

Any provider enabled (checked) will be available to the recipient at the time of signing.

There is no opportunity for Digital IDs from other providers to be accepted.

At the time of signing, the recipient is presented with a drop-down list of acceptable IdPs:

The recipient can then select a provider and complete the signature process.

If the signer does not have a Digital ID from one of the acceptable providers, a link is provided for them to get a new ID.

Configuration options exist for both Internal and External recipients, allowing the admin to restrict recipients to known vendors. 

The top section (in yellow below) establishes the default settings for all recipients (internal and external).

Admins have the option to enable a different set of controls for external recipients (only) by checking the option to Use different digital signature settings for external signers (highlighted in teal below).

When recipients apply a signature, the preferred option is preselected for them.

Different IdPs can be selected for internal vs. external recipients.

The recipient can change the IdP to any of the other approved vendors if they have need.

There are some providers that restrict the access to their service only to pre-authorized customers. This means that the service will not be accessible until the provider has authorized the account to use it.

BankID Sweden is a commercial service of such kind. Corporate-specific providers are also restricted to authorized accounts.

During the activation process these providers will require the subscribing account to provide their “Account ID” to configure the service for them. Once authorized by the provider, your users will be able to use the restricted service. Until then your users will typically see an error message from the provider when trying to use a restricted service.

The ability to preselect the Digital ID providers your account accepts can be enabled at the Account level by the Adobe Sign Account Admin.

Group level settings are permitted, and will over-ride the Account level values. 

Once the setting is saved in the Admin UI, the setting takes effect.

Senders do not need to do anything to have the setting take effect.

This setting impacts only the signing recipients.

The settings can be found in the UI by navigating to: Account > Account Settings > Digital Signatures

• Which IdPs are permitted to sign an agreement is locked into the agreement at the time it is sent. Changing which IdP can provide a Digital ID will not impact agreements already in the signature cycle.