HIGH story-power-of-attorney-documentation-global-admin-008 5 pts

User Story

As a Global Administrator
I want to configure the e-signature provider (e.g., Signicat with BankID support) and define which document types require legally binding signatures versus simpler in-app acknowledgments for each member organization
So that So that signing requirements can be tailored to each organization's legal obligations and risk tolerance, and the platform can support different providers or signing methods as the feature set evolves across organizations

Acceptance Criteria

  • Given the global administrator accesses the document signing configuration for an organization, when they select an e-signature provider from the supported list, then the configuration is saved and applied to all new signing sessions for that organization
  • Given a provider is configured, when the administrator enters API credentials and webhook URLs, then the system validates the connection to the external provider before saving
  • Given document type signing policies are configured, when an organization administrator initiates a signing workflow for a specific document type, then only the signing methods permitted by policy are offered as options
  • Given the global admin updates a provider configuration, when existing in-progress signing sessions are checked, then they continue using the previous provider configuration without interruption
  • Given an organization has no e-signature provider configured, when an organization administrator attempts to initiate a BankID signing workflow, then an informative error is shown directing them to contact the global administrator

Business Value

Different organizations have different legal obligations and vendor relationships. Configuring e-signature providers at the platform level ensures the Global Administrator can onboard new organizations with their specific signing requirements without code changes, and gives each organization the correct legal signing tool. Centralizing this configuration also makes provider migrations straightforward — if Signicat is replaced, only one configuration change is needed rather than per-organization updates.