Digital Signatures in Workflow

Hi All,
We have a requirement, where we have to use digital signatures in workflow. It means, at each level the form should be signd digitally. Has anybody done this before?
Can we store the digital signature somewhere, and then set it dynamically at each step of workflow.
Thanks in Advance,
Amit

Hi Amit,
This is very much possible.
all you have to do, is store the keys of the signatures, in keyStore of the Visual Admin.
Then, programatically, you can fetch these signatures from the server & sign the document.
There are standard BAPIs provided for the same.
This process is called: Server-side digital signatures.
Please refer to this link of help-sap, for exact details:
http://help.sap.com/saphelp_nw70/helpdata/EN/58/06abab9ccf44e294105607707e5c50/frameset.htm
Regards,
Hanoz

Similar Messages

Digital Signature and workflow functionality in Enh Pack

We are working in ECC 6.0 environment. Recentaly we have activated Enh Pack 3 and 4 in our system. After that I can couple of additional QM functionality in system. SAP has provided few more settings in SPRO to activate digital signature in QN and workflow in standard peace.
I would be wonder if anyone has used those function in standard system without any custom development.
How can we use/ activate those (digital signature for QN and workflow) functionality? Reply appreciated.

SAP IMG > Quality Management> Quality Notifications> Notification processing> Specify Digital Signature
Give details like
Level -Header /Task Notification Type
Business
   Transaction
Signature Type
Strategy
Enter the Business Transaction: like PMM2 for Put notification in process,PMM4 for Complete notification,     QN40 for Release Task etc
Depending on your configuration systems asks for digital signature when you set header level status or Task level status
Means if u set Digital signature for PMM2 for Put notification in process system prompts for Digital siganture.
Regards
Nitin

DMS & Workflow - Handling Digital Signatures

Hello,
I have set up a DMS status network, and I'm controlling this network using workflow.
My workflow listens to "DRAW" for changes, and when a particular status is seen,
workflow starts.
This workflow sends out work items to several users, prompting them to review.
At this point, users can go into the DIR from their Inbox, and either select Approve or Reject Status.
Both Approve and Reject status are set up to require a Digital Signature. Workflow controls moving the status back to a "ready" state for the next reviewer. It also keeps track of the number of reviewers, in order to know when all reviews are done.
When everyone behaves in timely manner, this works great. Workflow has no issue with setting DMS statuses - in most cases.
However, I also have deadline monitoring set up on my workflow. After 3 days pass with no action, I want to "auto-reject". System id WF-BATCH is what I use to set statuses through workflow, and this works fine in most cases. However since the status "Approve" and "Reject" are set to require digital signatures, this system initiated status change FAILS. The system does not provide a digital signature for itself.
My question is - is this possible through configuration - to set it up in some way that a system ID can promote to a status and either pass a password or simply not require a digital signature?
My network is kind of stuck at this point because one of the 2 statuses MUST be selected for it to proceed.
Edited by: Bill Bessette on Jul 24, 2008 9:40 PM

Hello Niranjan,
That's an interesting suggestion... I'll investigate. Any additional detail you can provide on how to implement this User/Pwd hard coding in WF would be appreciated.
In the meantime, here is some additional info.
Imagine a status network as follows:
Draft
Initiate Workflow
In Review - Reject/Approve
Active
Document starts in draft. The author selects a status of (Initiate Workflow) at which point the workflow starts.
Workflow moves the status from (Initiate Workflow) to (In Review)
and puts a work item in the reviewers mailbox. Reviewers can change the status to (Reject) or (Approve) and each requires a digital signature. After each reject/approve, Workflow moves the status back to (In Review) so that the next person may act. When everyone has reviewed and approved, workflow moves the status to (Active). If anyone has rejected, workflow moves the status back to (Draft.)
This is a simplification, but that's the scenario. WF-BATCH is our workflow ID that has SAP-ALL authorization. Problem occurs when deadline monitoring is in effect. If a reviewer doesn't act within the designated deadline, the monitor fires and the work item is flagged as obsolete. Due to the status network, the only valid path is to either move to (Approve) or (Reject). But since both of those statuses have been set up to require digital signature, they fail. We end up stuck in (In Review) with no way out.
If hard coding the userid WF-BATCH and the password in some table will solve this problem, then we'd be thrilled.
Bill
Edited by: Bill Bessette on Jul 25, 2008 6:00 PM

Digital Signatures with SmartCards.

Hi guys,
Has anyone implemented in R/3 digital signatures with smartcards?
Currently I'm at customer side trying to implement digital signatures within workflow processes using ABAP SSF functions. The smartcard devices are already installed, but I can't read the data inside the smartcard, moreover, I can't link the smartcard device with R/3 and I don't know how to do it
I read in some Weblogs and documents that it is necessary a SAP-certified external security product. I believe this external security product is the software that comes inside of smartcard drivers CD. It is something like a little application on which we can sign in data and put our fingerprint.
I guess it is not supposed to develop an interface application between smartcard and R/3! When I started these developments I thought that I only needed to configure some environment variables to connect these devices with R/3 and then develop the ABAP flow logic with SSF Functions - Am I right?
Can anyone provide me some guidelines for this issue?
Thanks in advance,
Ricardo.

The SmartCard device is present at the frontend PC - and that's the place where the digital signature operation has to take place. Important is the "What You See Is What You Sign" principle: it has to be ensured that the data that is to be signed (using the private key stored on the SmartCard) is exactly the same as the one that is displayed to the user.
Notice: there is a different scenario where the server is signing the data (after prompting the user for userID and password and validating that information).
The signed data is then transported back to the server where it is stored (to ensure auditibility); usually you'll have to keep the (archived) data for years; the public key need to be archived as well.
Notice: it is possible to attach the certificate (-> public key) which has been used to sign the data to the signed data.
Regards, Wolfgang

Digital Signatures and SharePoint Workflow

Hello,
We are trying to combine .pdf documents (created in Acrobat 9 pro) requiring a series of digital signatures with a workflow process in MS SharePoint 2007. If a Word document is used, each person in the workflow process can open the document on the server and any changes made are saved to the document for the next person in the workflow to see. However, a .pdf document is opened in the browser and can only be saved as a local copy after signing it. Does anyone know if there is a way to have the .pdf opened on the server in the same manner as Word documents?
I know you can send .pdf's vial email for signing but we really need the overall visibility SharePoint provides.
Thanks for any help!

Hi David,
SharePoint Integration has been added in Acrobat X and Reader X. With this version of the product, you can open SharePoint files in standalone Acrobat and check-out, check-in and versioning of pdf files works in line with MS Word. I think this is what you need.
Thanks,
Richa

Digital Signatures in sap workflow at transaction level.

Hi Experts,
How to show the digital signature at task level approval in workflow, I have requirement as below.
For example purchase requisition approval workflow. We have 3 level of approval process for PR, if first level approves it the work item need to go to second level approval with first level user signature (Digital Signature) same like third level also.
Can we display the digital signature at transaction level.

Hi,
In Task Description Tab, you can insert a graphic as a Digital Signature coding the condition you need.
Regards,

Use of digital signatures within a workflow

Hello all,
We attempt to build a workflow, where users will be digitally signing the forms being routed. However there are implications some implications with signing the documents.
Here is the use scenario
1. Initiator fills a form with datadigitally signs the formand then submits the form.
2. 1st participant reviews the signed formthen he also signs the form on a separate area
3. The signed (by initiator and participant) form is then archived. The data are extracted and stored to a third party system (e.g. a database)
What we have tried up to now
a. used Designer 7.0 to design a XFA form template incorporating some data entry fields and two signature fields.
b. embedded a binding schema and saved as .xdp
deployed the form to LC Form Manager
c. we RE the deployed form properties to allow for digital signatures in Reader
d. used Workflow Designer to create a simple workflow with two users (initiator to fill and sign the form, 1st participant to sign the form, 2nd participant for viewing the result)
3. set a Init-Form to use this particular template (the url points to our form)
4. set a Form-Var (the variable is of type document, the XFA schema is also displayed)
5. set data mappings (user properties) to use Form-Var as both input and output
Now, the sad story
i. initiator logins to FM, selects the form, fills some data, signs and submits the form
ii. 1st participant receives a working item in his worklist
iii. he opens the form, any data the initiator entered are there, BUT the digital signature field (where initiator previously signed) is EMPTY
iv. initiator navigates to his archive and sees the same (data but no signature)
Remark: whenever this form opens (1st participant worklist or initiator archive), the form takes up all the space within Internet Explorer, i.e. the FM left-side navigation and any other frames disappear
Any idea to workaround on this would be great. Thanks in advance for your help,
~Evangelos

Hi Evangelos,
Your issue is that you are submitting back an XDP format and not the PDF format. To resolve this issue, open your form and select the FSSUBMIT_ field from the heirarchy. Click on the Object palette and look at your Submit options. On that tab look at the Submit Format dropdown. You will want to choose PDF instead of XML Data Package (XDP). I have attached the working version of your form!!!
Basically you where reconstructing the PDF with the submitted data (the data does not have the signature in it) and hence the signature was being lost. The signature info is only part of the finished PDF.
NOTE: that the signatures will break from step to step (i.e. a yellow exclamation mark will appear) but Adobe are aware of this, and it will be fixed in the future.
regards
David.

SharePoint 2010 Collect Signatures workflow - no digital signatures?

Hello, I configured a "Collect Signatures" workflow for the content type "Document", then uploaded a MS Word 2010 (.docx) document as content type "Document". This Word document as 2 empty Signature Line in it.
I then start the workflow, basically 2-stage with 2 person from my Active Directory. However, what I found is that when I go to my workflow task and click on the "This document requires your signature" link, it pops up a "Workflow Task" box in the
browser. There is a "Sign" button which I can click to sign but it does not sign on the signature lines inside my Word document.
What am I doing wrong here? Or does SharePoint 2010 Collect Signatures workflow no longer work with digital sigantures? Thanks.

Hello ,
We have chceked by setting up a repro at our end and its not possible to complete the workflow without opening the document . Also below are some additional findings that I have and would like to share :-
1) In Office 2007 (Word and Excel) you can click on the office button from the respective application while you have the concerned document open in it. This triggers the collect digital signature workflow and the users signs
it immediately as he can see the popup on the screen. Still he has to go to the task list to complete the task which I would say is a manual process following the workflow task is 100% completed.
2) In SPS2010 with Office 2010 we do not have an option to trigger the workflows from within the Office document. Instead you directly go to task list to open the task and click on sign button to complete the task. Here you
still need to open the document again and digitally sign it. The difference is workflow here is not triggered in Office document. Even here it is a kind of manual process except that you don’t see a popup to sign document immediately from Office document
due to the fact that workflow is triggered from SharePoint task list.
Thanks,
Manas
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread."

How do I add a digital signature to Word 2011?

I am at a loss at to adding a digital signature to Word 2011 docs on my macbook pro, any ideas???

Formscentral does not support forms with digital signature workflows. I suggest you see if our Echosign product meets your needs.

How do I add a digital signature to my online form?

With regular Adobe (Standard or Professional) software, you can add a digital signature line. I want to know how I can do it on FormCentral.
When I PDF the form I created on FormCentral and try to add the digital signature in Adobe, I get a message that I cannot due to security settings of the document.

Formscentral does not support forms with digital signature workflows. I suggest you see if our Echosign product meets your needs.

How do I create a digital signature to use when filling out applications online?

The application is asking me to add or create a digital ID to sign and encrypt documents. The certificate that comes with your digital ID is sent to others so that they can verify your signature.
I have four options: Browse for an existing digital ID file
Configure a roaming ID for use on this computer
Create a self-signed digital ID for use with Acrobat
Look for newly inserted hardware tokens

Formscentral does not support forms with digital signature workflows. I suggest you see if our Echosign product meets your needs.

Digital signatures for customer facing documents

Hello,
I am a pretty experienced user of Adobe TechComm Suite (FrameMaker, RoboHelp), but I've never needed to dig too deep into Acrobat, so I am a newbie when it comes to setting up digital signatures.
I am using Acrobat Pro XI on Windows 7 professional, and the people who need to approve documents only have the free Adobe Reader. I don't have access to any sort of workflow system at the moment, and we aren't using a content management system. Adobe EchoSign is not suitable for our documents because of size restrictions and because 3rd-party cloud storage violates corporate policy.
What I'd like to be able to do is this:
Include a signatures page when I create a PDF of a document. Place the document at a shared network location (Windows network).
Notify approvers (Outllok email) that they need to digitally sign a PDF at a shared network location.
See the digital signatures and see that they all are valid.
Send out the signed PDF to external customers, in a way that it doesn't show customers that the document includes a form, and doesn't ask for more signatures, but does confirm that the PDF has not been changed since it was signed. Customers must be able to print all or part of the PDF if they want to.
I have a feeling that I may be missing some steps or some external components. Any advice on how to set this up would be welcome.
Thanks very much,
David

What you want to do can be done with Acrobat, but it depends a bit on how many internal users will be needing to sign the documents. For Reader users (desktop versions on Windows and Mac) to digitally sign a document, it needs to be Reader-enabled with either Acrobat Pro (not Standard) or LiveCycle Reader Extensions. The latter is expensive server-based software.
A signature field can be set up so that the document is locked to further changes once it is signed, but this involves the user selecting the option or you can pre-configure the document (signature field, specifically) with a bit of JavaScript so it will always be locked after signing.
The external users will be able to validate the signature (with Acrobat/Reader) and print if you haven't restricted printing.

Digital Signatures - preserving throughout the process

I have a form with 4 parts, each part requiring a digital signature.
I just read the article on preserving digital signatures (http://www.adobe.com/devnet/livecycle/workflow/articles/lc_wf_preserve_digisig_tip.pdf), but I am still a little confused. Does this only work if I am sending the form as an email attachment (is that what the routes and attachments mean)?
We want to do everything on-line (using pdf's)? We want part 1 user to fill out the form on-line, digital sign it, then it submit the form where it gets routed to part 2 user. So, is it possible for user 1 to type in the last name to look up user 2 and then selects user 2 - user gets an email with a URL to fill put part 2 on-line, but the digital signature from user 1 needs to be preserved. Then user 2 will digital sign the form and route to user 3.
So, the basic question was, can we do all this on-line (using PDFs) or do we have to involve email attachments? I wouldn't think so, but I wanted to clarify.
Thank you,
Jennifer

<[email protected]> ha scritto nel messaggio news:[email protected].. >I have a form with 4 parts, each part requiring a digital signature. > > I just read the article on preserving digital signatures > (http://www.adobe.com/devnet/livecycle/workflow/articles/lc_wf_preserve_digisig_tip.pdf), > but I am still a little confused. Does this only work if I am sending the > form as an email attachment (is that what the routes and attachments > mean)? > > We want to do everything on-line (using pdf's)? We want part 1 user to > fill out the form on-line, digital sign it, then it submit the form where > it gets routed to part 2 user. So, is it possible for user 1 to type in > the last name to look up user 2 and then selects user 2 - user gets an > email with a URL to fill put part 2 on-line, but the digital signature > from user 1 needs to be preserved. Then user 2 will digital sign the form > and route to user 3. > > So, the basic question was, can we do all this on-line (using PDFs) or do > we have to involve email attachments? I wouldn't think so, but I wanted to > clarify. > I think that in your specific case, also the process via email would not preserse digital signatures, because every step that required a new digsign would change the hash value. Bye, Alessio

Digital Signatures: Multiple Tasks and Signers

Hello, All-
Context: We have a repair and overhaul operation that has several technicians performing maintenance. Basic workflow: product comes in, gets the paperwork for the specific maintenance, and then travels through the facility to be broken down, serviced, rebuilt, tested, and returned to service. We would like the "paperwork" to be all electronic (which we can do with Acrobat by using PDF documents), but there are several tasks that require a technician's signature. Not a digital signature for the WHOLE document, just a task in the document.
Objective: Multiple technicians signing off on mutilple tasks, all in one document.
Questions: Can we modify the document (i.e., add/insert pages) in Acrobat after a digital signature is applied using the Reader? Do those signing off on the tasks only need the Reader to create and apply the signature files? Can multiple signature files be stored in a centralized location, since technicians use work station machines (rather than a computer issued specifically to them)?
Doing some investigation for the best solution. Sorry for the series of long questions.

> "No. However, this can't be done in Reader under any circumstances... Reader is just that, a reader of PDF files. It can't edit them in any meaningful way, like add new pages (unless a special template was set up for this purpose)."
- I should have clarified: we would like to modify the document using the full Acrobat Suite after digital signature. Signing once locks the entire document from further edits.
> "Not 100% sure about that, but I think the answer is no. Signatures have to located on the local machine."
- That's a problem: then every technician needs a digital signature on every machine. Not suitable at an enterprise/department level.
I just found an answer to the basic concept, as it was answered just yesterday (http://forums.adobe.com/thread/1338837): I can leverge the Stamp feature and create a custom stamp to act as a signature. I can still modify the document after applying the stamp.
Now the test: can others remove my stamp?
Edit: Thanks for the help, BTW. I see you edited your answer to question #1. Again, maybe the stamp feature is sufficient?

Multiple digital signatures from one person

I have a PDF form that has 10 pages, each page has a Signature field.
I want to put this form in the WorkSpace, and route it in a workflow process, eventually route it to the user who is supposed to sign it.
But I don't want him to sign 10 times (one for each page).
Is it possible to let him only sign the first page, and all the other 9 pages get applied with his signature automatically?
How to do that?
thanks

You could have a process that leverages the "Digital Signatures" functionality of LiveCycle. You could apply the signatures on the server side. You would need to make sure that the signer's digital certificate was imported into the "Credentials" section of the trust store. LiveCycle needs access to the P12 or PFX file to create the signature.
I am not aware of any way to automate the signature process on the client side.
Regards
Steve

Digital Signatures in Workflow

Similar Messages

Maybe you are looking for