baton-docusign

baton-docusign

baton-docusign is a connector for DocuSign built using the Baton SDK. It communicates with the DocuSign eSignature REST API v2.1 to sync users, groups, signing groups, and permission profiles.

Check out Baton to learn more about the project in general.

Connector Capabilities

Resources Synced

• Users
• Groups
• Signing Groups
• Permission Profiles

Provisioning Support

• Users (create accounts)
• Group membership (grant/revoke)
• Signing group membership (grant/revoke)
• Permission profiles (grant only - users must always have a profile assigned)

Connector Credentials

To connect to DocuSign, you will need the following credentials:

1. Client ID (Integration Key)
2. Client Secret
3. Redirect URI
4. Refresh Token
5. Environment Selection (demo or production)

Obtaining Credentials

1. Log in to DocuSign Developer Account.
2. Go to Admin → Apps and Keys.
3. Copy The User ID.
4. Click on Add App and Integration Key.
5. Click in "Add App and integration Key"
6. Configure the app:
   • Enable User Application User Application
   • Click Add Secret Key and copy it.
   • Under Additional Settings, add your Redirect URI (e.g.,"http://example.com/callback")
   • Under CORS Settings enable GET, POST, PUT, DELETE, and HEAD.
7. Save the application.

Getting Started

Prerequisites

Before using the connector, ensure you have:

• DocuSign account (demo or production)
• Admin access to create OAuth integrations
• All required credentials (Client ID, Client Secret, Refresh Token)

brew

brew install conductorone/baton/baton conductorone/baton/baton-docusign

baton-docusign \
  --clientId "YOUR_CLIENT_ID" \
  --clientSecret "YOUR_CLIENT_SECRET" \
  --redirect-uri "YOUR_REDIRECT_URI" \
  --refresh-token "YOUR_REFRESH_TOKEN"

baton resources

docker

docker run --rm -v $(pwd):/out \
  -e BATON_CLIENTID=clientId \
  -e BATON_CLIENTSECRET=clientSecret \
  -e BATON_REDIRECT_URI=redirectUri \
  -e BATON_REFRESH_TOKEN=refreshToken \
  ghcr.io/conductorone/baton-docusign:latest -f "/out/sync.c1z"

docker run --rm -v $(pwd):/out \
  ghcr.io/conductorone/baton:latest -f "/out/sync.c1z" resources

source

# Install baton and baton-docusign
go install github.com/conductorone/baton/cmd/baton@main
go install github.com/conductorone/baton-docusign/cmd/baton-docusign@main

baton-docusign \
  --clientId "YOUR_CLIENT_ID" \
  --clientSecret "YOUR_CLIENT_SECRET" \
  --redirect-uri "YOUR_REDIRECT_URI" \
  --refresh-token "YOUR_REFRESH_TOKEN"

baton resources

Data Model

baton-docusign will pull down information about the following resources:

• Users
• Groups
• Signing Groups
• Permission Profiles

Contributing, Support and Issues

We started Baton because we were tired of taking screenshots and manually building spreadsheets. We welcome contributions, and ideas, no matter how small—our goal is to make identity and permissions sprawl less painful for everyone. If you have questions, problems, or ideas: Please open a GitHub Issue!

See CONTRIBUTING.md for more details.

baton-docusign Command Line Usage

baton-docusign

Usage:
  baton-docusign [flags]
  baton-docusign [command]

Available Commands:
  capabilities       Get connector capabilities
  completion         Generate the autocompletion script for the specified shell
  config             Get the connector config schema
  help               Help about any command

Flags:
      --client-id string                                 The client ID used to authenticate with ConductorOne ($BATON_CLIENT_ID)
      --client-secret string                             The client secret used to authenticate with ConductorOne ($BATON_CLIENT_SECRET)
      --clientId string                                  required: OAuth 2.0 Client ID from DocuSign ($BATON_CLIENTID)
      --clientSecret string                              required: OAuth 2.0 Client Secret from DocuSign ($BATON_CLIENTSECRET)
      --demo                                             Set to true for demo environment, false for production ($BATON_DEMO) (default true)
      --external-resource-c1z string                     The path to the c1z file to sync external baton resources with ($BATON_EXTERNAL_RESOURCE_C1Z)
      --external-resource-entitlement-id-filter string   The entitlement that external users, groups must have access to sync external baton resources ($BATON_EXTERNAL_RESOURCE_ENTITLEMENT_ID_FILTER)
  -f, --file string                                      The path to the c1z file to sync with ($BATON_FILE) (default "sync.c1z")
  -h, --help                                             help for baton-docusign
      --log-format string                                The output format for logs: json, console ($BATON_LOG_FORMAT) (default "json")
      --log-level string                                 The log level: debug, info, warn, error ($BATON_LOG_LEVEL) (default "info")
      --otel-collector-endpoint string                   The endpoint of the OpenTelemetry collector to send observability data to ($BATON_OTEL_COLLECTOR_ENDPOINT)
  -p, --provisioning                                     This must be set in order for provisioning actions to be enabled ($BATON_PROVISIONING)
      --redirect-uri string                              required: Redirect URI registered in your DocuSign integration ($BATON_REDIRECT_URI)
      --refresh-token string                             required: Refresh token. ($BATON_REFRESH_TOKEN)
      --skip-full-sync                                   This must be set to skip a full sync ($BATON_SKIP_FULL_SYNC)
      --include-signing-groups                           Set to true to include syncing signing groups (for customers with signing groups feature enabled) ($BATON_INCLUDE_SIGNING_GROUPS)
      --ticketing                                        This must be set to enable ticketing support ($BATON_TICKETING)
  -v, --version                                          version for baton-docusign

Use "baton-docusign [command] --help" for more information about a command.