Source type

DocuSign Source Configuration

DocuSign sources receive Connect webhooks and verify one of the DocuSign HMAC signature headers.

DOCUSIGNPOST, PUT, PATCH, DELETEHMAC KeyProductivity
DocuSign Connect HMAC documentationAll source types
DocuSign sends webhook traffic to a FastHook source, FastHook validates the provider contract, records the request, and routes accepted events through connections to destinations.DocuSignProviderPOST, PUT, PATCH, DELETESignedFastHookSource URLDOCUSIGNProvider credentialsignatureVerify before queue401 on auth failure405 on wrong methodAcceptedRequestverified: trueConnections route the accepted request to destinationsFilters, transformations, retries, replay, and destination signatures stay downstream from source verification.

DocuSign configuration

Create a DocuSign source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured HMAC Key values for provider signature. FastHook uses these settings to validate each DocuSign delivery before it enters the routing workflow.

Source Type

DOCUSIGN

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

HMAC Key

DocuSign source config
{
  "type": "DOCUSIGN",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "DOCUSIGN",
      "webhook_signing_secret": "provider-secret"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

DocuSign request contract

FastHook computes base64 HMAC-SHA256 over the raw body and compares it with x-docusign-signature-1 through x-docusign-signature-100.

POSTPUTPATCHDELETE

DocuSign headers

Preserve x-docusign-signature-1, x-docusign-signature-N when sending DocuSign test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

x-docusign-signature-1

First possible HMAC-SHA256 signature header.

x-docusign-signature-N

FastHook checks up to 100 configured HMAC signature headers.

DocuSign setup

  1. Enable HMAC security on the DocuSign Connect configuration.
  2. Paste the selected HMAC key into FastHook.
  3. If DocuSign sends multiple HMAC headers, FastHook accepts any matching configured key.

Continue with DocuSign