60 results found
-
Webhook Authentification
I’m pretty confident I should be able to break through the Merge Field bit as I’m sure I’m just doing something daft, but I don’t see how the WebHooks work.
When I provide an endpoint for PandaDoc to call, how do I set any headers or authentication? We don’t allow anything to make completely unauthenticated connections regardless of their origins. There’s mentions of shared keys that can be provided by Panda, but the challenge my end remains that if you cant authenticate with me, we wont even get as far as accepting the request.
2 votes -
1 vote
-
Improve email forward security to prevent impersonation and other risks
When you forward a signature email to another party, this new party can sign as you without anyone the wiser. I perceive this as a potential security breach.
Steps to reproduce:
As sender, prepare a document to be signed by signer1.
Disable the signature forwarding toggle.
Send by email.
As recipient1, forward the email to recipient2 (email forward, NOT the button in the body of the email)
As recipient2, open the document and observe that you are signing as recipient1.On the top of my head, automated email forwarding are particularly problematic in this case, among other security concerns. Also…
1 vote -
1 vote
-
1 vote
-
1 vote
-
PandaDoc online validation tool
PandaDoc online validation tool where you can validate/verify the document
1 vote -
SSO interface
Client is requesting that we create an interface to help clients configure their SSO
1 vote -
Ability to use both passcode & sms verification at the same time on a document
Ability to use both passcode & sms verification at the same time on a document
1 vote -
HIPAA compliant sign in for website (alternative to Forms)
I need a HIPAA compliant online form that I can make in PandaDoc and embed into my website so patients can sign in. I can embed the forms I created but the form has an extra step that collects name and email address to view the document. This makes things very redundent
1 vote -
1 vote
-
A generic "Privacy Policy" page for websites.
FormSwift has this. I would like to be able to get this item from PandaDocs without switching document generating sites.
1 vote -
ability to sign for a user and break in when a document/ signature is forwarded
ability to sign for a user and break in when a document/ signature is forwarded to another recipient
1 vote -
1 vote
-
Webhooks Security
Concern of security of Webhooks in the dashboards (users have access into the dashboard and can adjust/delete Webhooks; also no audit capabilities)
Need to get this behind a security role/wall1 vote -
Disable local password for certain email domains
I would like to enforce Google login for my company's users. Please provide settings where I can specify my company's email domain and specify that local passwords not be permitted for users with this email domain.
This is a simpler configuration option than setting up Google as a SAML IdP.
1 vote -
1 vote
-
AODA compliance
require AODA compliance
1 vote -
CRA requires special compliance
CRA Canadian revenue association that requires special compliance
1 vote -
Reset Password Protection
reset password on protected documents
1 vote
- Don't see your idea?