> You are reading the Docusign Developer Documentation. For clean Markdown of any page, append .md to the page URL.
>
> Documentation indexes by section:
> - APIs and SDKs: https://docusign.docs.buildwithfern.com/docs/llms.txt
> - Platform 101: https://docusign.docs.buildwithfern.com/platform/llms.txt
> - Extension Apps: https://docusign.docs.buildwithfern.com/extension-apps/llms.txt
> - Docusign CLI: https://docusign.docs.buildwithfern.com/docusign-cli/llms.txt
>
> Authentication (OAuth, JWT Grant, M2M): https://docusign.docs.buildwithfern.com/platform/auth
> Webhooks and Connect: https://docusign.docs.buildwithfern.com/platform/webhooks
>
> OpenAPI specifications: https://docusign.docs.buildwithfern.com/openapi.json
> MCP server: https://docusign.docs.buildwithfern.com/_mcp/server

# Using encrypted passwords in SOAP

This section provides information on requesting and using a Docusign encrypted password in the SOAP api.asmx API where the wsse security header is used for authentication.

## Step 1. Find user account

To start the process, use the Credential Login API to find the accounts associated with the user’s credentials. This initial call uses the email address and clear text password.

The response shows that this user has access to two accounts and the BaseUrl shows that one account is on “test” while the second account is on “test2”. In future API calls, you will select the server and endpoint as appropriate for the account you will use. For the example we will use:

```

Account = https://test.docusign.net/api/3.0
UserId = 47c97f72-xxxx-xxxx-xxxx-75ac3b630bfa

```

**Note:** The email address can be used instead of the UserId in API calls.

**`Request example`**

```xml title="Request example"
POST https://test.docusign.net/api/3.0/credential.asmx HTTP/1.1
Host: test.docusign.net
Content-Type: text/xml; charset=utf-8
Content-Length: 458
SOAPAction: "http://www.docusign.net/API/Credential/Login"
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <Login xmlns="http://www.docusign.net/API/Credential">
      <Email>r.tester@gmail.com</Email>
      <Password>passWordabC2</Password>
      <ReturnBaseUrl>true</ReturnBaseUrl>
    </Login>
  </soap:Body>
</soap:Envelope>
```

**`Response example`**

```xml title="Response example"
HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Content-Length: 1895
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Fri, 11 Oct 2013 13:45:10 GMT
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
  <soap:Header>

<wsa:Action>http://www.docusign.net/API/Credential/LoginResponse</wsa:Action>
    <wsa:MessageID>urn:uuid:6b00bce5-xxxx-xxxx-bae6-350a3f8c1596</wsa:MessageID>
    <wsa:RelatesTo>urn:uuid:ec87cca1-xxxx-xxxx-xxxx-0ea7f3b6076c</wsa:RelatesTo>
  
<wsa:To>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To>
    <wsse:Security>
      <wsu:Timestamp wsu:Id="Timestamp-f3df2bf7-9dab-48dd-809e-e07ffb19d801">
        <wsu:Created>2013-10-11T13:45:10Z</wsu:Created>
        <wsu:Expires>2013-10-11T13:50:10Z</wsu:Expires>
      </wsu:Timestamp>
    </wsse:Security>
  </soap:Header>
  <soap:Body>
    <LoginResponse xmlns="http://www.docusign.net/API/Credential">
      <LoginResult>
        <Success>true</Success>
        <ErrorCode>Success</ErrorCode>
        <AuthenticationMessage>Successful authentication</AuthenticationMessage>
        <Accounts>
          <Account>
            <AccountID>1d270976-xxxx-xxxx-xxxx-a746b6881f0d</AccountID>
            <AccountName>Rest Tester Account</AccountName>
            <UserID>47c97f72-xxxx-xxxx-xxxx-75ac3b630bfa</UserID>
            <UserName>Resty Tester</UserName>
            <Email>r.tester@gmail.com</Email>
            <BaseUrl>https://test.docusign.net/api/3.0</BaseUrl>
          </Account>
          <Account>
            <AccountID>db08fde2-xxxx-xxxx-xxxx-bc611de2f525</AccountID>
            <AccountName>Rest Account Test2</AccountName>
            <UserID>3100c524-xxxx-xxxx-xxxx-688dcaba9d5d</UserID>
            <UserName>Resty Tester2</UserName>
            <Email>r.tester@gmail.com</Email>
            <BaseUrl>https://test2.docusign.net/api/3.0</BaseUrl>
          </Account>
        </Accounts>
      </LoginResult>
    </LoginResponse>
  </soap:Body>
</soap:Envelope>
```

## Step 2. Request encrypted password

Next, request the encrypted Password for the user by making a GetEncryptedPassword request to the server where this user’s account is located and providing the credentials in the X-Docusign-Authentication header.

The response returns the encrypted version of the password, such as SBXBCN...9LZuk= .

At this point, if client application (securely) stores the BaseUrl, UserId and encrypted password, then the application does not need to repeat the previous calls unless authentication fails on successive calls.

**`Request example`**

```xml title="Request example"
POST https://test.docusign.net/api/3.0/accountmanagement.asmx HTTP/1.1
Host: test.docusign.net
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://www.docusign.net/API/AccountManagement/GetEncryptedPassword"
X-DocuSign-Authentication: <DocuSignCredentials><Username>r.tester@gmail.com</Username><Password>passWordabC2</Password><IntegratorKey>DOCU-KEY-ABC2</IntegratorKey></DocuSignCredentials>
Content-Length: 342

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <GetEncryptedPassword xmlns="http://www.docusign.net/API/AccountManagement" />
  </soap:Body>
</soap:Envelope>
```

**`Response example`**

```xml title="Response example"
HTTP/1.1 200 OK
Cache-Control: private, max-age=0
Content-Length: 1329
Content-Type: text/xml; charset=utf-8
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Fri, 11 Oct 2013 13:37:56 GMT

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
  <soap:Header>
  <wsa:Action>http://www.docusign.net/API/AccountManagement/GetEncryptedPasswordResponse</wsa:Action>
    <wsa:MessageID>urn:uuid:ce8dc29c-c2b6-46e4-b474-b15b1cf6523d</wsa:MessageID>
    <wsa:RelatesTo>urn:uuid:d763a3d1-de91-474a-800c-34987b858f6e</wsa:RelatesTo>
  <wsa:To>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To>
    <wsse:Security>
      <wsu:Timestamp wsu:Id="Timestamp-48eac7b1-7d1c-4034-a7cf-92e55010579e">
        <wsu:Created>2013-10-11T13:37:56Z</wsu:Created>
        <wsu:Expires>2013-10-11T13:42:56Z</wsu:Expires>
      </wsu:Timestamp>
    </wsse:Security>
  </soap:Header>
  <soap:Body>
    <GetEncryptedPasswordResponse xmlns="http://www.docusign.net/API/AccountManagement">
      <GetEncryptedPasswordResult>
        <EncryptedPassword>SBXBCNHn29VRB8e8cxsMes9LZuk=</EncryptedPassword>
        <Success>true</Success>
      </GetEncryptedPasswordResult>
    </GetEncryptedPasswordResponse>
  </soap:Body>
</soap:Envelope>
```

## Step 3. Authenticate request status call

The following request shows how the encrypted password is used, along with the Integrator Key and UserId, to authenticate a Request Status call for an envelope. This same pattern would be used in all successive API calls.

In this case the Integrator Key is \[DOCU-KEY-ABC2].

**`Example request`**

```xml title="Example request"
POST https://test.docusign.net/api/3.0/api.asmx HTTP/1.1
Host: test.docusign.net
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://www.docusign.net/API/3.0/RequestStatus"

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
  <soap:Header>
    <wsa:Action>http://www.docusign.net/API/3.0/RequestStatus</wsa:Action>
    <wsa:MessageID>urn:uuid:be6a8f4a-xxxx-xxxx-xxxx-496f207c5c27</wsa:MessageID>
    <wsa:ReplyTo>
  <wsa:Address>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:Address>
    </wsa:ReplyTo>
    <wsa:To>https://test.docusign.net/API/3.0/api.asmx</wsa:To>
    <wsse:Security soap:mustUnderstand="1">
      <wsu:Timestamp wsu:Id="Timestamp-8af36607-xxxx-xxxx-xxxx-e849cd186c93">
        <wsu:Created>2013-10-11T13:34:18Z</wsu:Created>
        <wsu:Expires>2013-10-11T13:39:18Z</wsu:Expires>
      </wsu:Timestamp>
      <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="SecurityToken-289a0ed4-xxxx-xxxx-xxxx-f64c692384ae">
        <wsse:Username>[DOCU-KEY-ABC2]47c97f72-xxxx-xxxx-xxxx-75ac3b630bfa</wsse:Username>
        <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">SBXBCNHn29VRB8e8cxsMes9LZuk=</wsse:Password>
        <wsse:Nonce>STapZaoS6MuKXmdh2TU1Qw==</wsse:Nonce>
        <wsu:Created>2013-10-11T13:34:18Z</wsu:Created>
      </wsse:UsernameToken>
    </wsse:Security>
  </soap:Header>
  <soap:Body>
    <RequestStatus xmlns="http://www.docusign.net/API/3.0">
      <EnvelopeID>D65860E3-xxxx-xxxx-xxxx-4F37ABDED5AA</EnvelopeID>
    </RequestStatus>
  </soap:Body>
</soap:Envelope>
```