Authentication Restriction Behavior

Foxit eSign provides organization administrators with the ability to control which authentication methods are available to users when creating envelopes, templates, and documents. Using the Default Authentication Level setting, admins can enforce organization-wide authentication policies and guide users toward approved authentication methods during the signing process.

To configure authentication restrictions:

1. Go to Account Settings
2. Select Security
3. Navigate to Default Authentication Level

From this section, administrators can:

• Select a default authentication method
• Choose which authentication methods are available to users
• Save organization-wide authentication preferences

3.1 Select Allowed Authentication Methods

Administrators can use the checklist popover to control which authentication methods users can access.

Only selected authentication methods will appear during:

• Envelope preparation
• Template creation
• Document preparation
• Bulk send configuration

3.2 Set the Organization Default Authentication Method

Administrators can select a default authentication method for the organization.

The selected authentication option is automatically pre-selected for:

• New envelopes
• New templates
• New documents

3.3 Ensure At Least One Authentication Method Remains Enabled

Foxit eSign requires at least one authentication method to remain active.

If only one authentication method is selected:

• The option becomes locked
• It cannot be unchecked until another authentication method is enabled

This helps prevent invalid security configurations.

4.1 New Envelopes, Templates, and Documents

When users create new envelopes, templates, or documents:

• Only admin-approved authentication methods are displayed
• The organization's default authentication method is automatically selected

4.2 Copy and Clone Actions

When users:

• Copy an envelope
• Clone an envelope
• Copy a template
• Clone a template

Foxit eSign automatically updates the authentication method to match the organization’s current default authentication setting.

Users are also notified when the authentication method is updated to align with company policy.

4.3 Older Templates and Drafts

If users:

• Apply older templates
• Reopen drafts created before restriction updates

Foxit eSign validates the authentication method against the latest organization policy and automatically updates restricted authentication methods to the current default setting.

4.4 Bulk Send and API Support

Authentication restrictions also apply to:

• Bulk send workflows
• API-created envelopes and templates

Only allowed authentication methods can be used across these workflows.

• Authentication restrictions are applied organization-wide.
• Changes take effect immediately after the settings are saved.
• Previously completed or sent envelopes remain unchanged.
• Authentication restrictions apply consistently across user actions and workflows.

This enhancement helps organizations:

• Standardize authentication requirements
• Improve signer verification processes
• Enforce internal compliance policies
• Reduce the risk of unauthorized authentication selection
• Maintain consistent authentication settings across the organization

This enhancement is available in Foxit eSign under:

Account Settings → Security → Default Authentication Level