CARL Source includes an electronic signature solution that guarantees the validity and authenticity of any modifications made to your data.

1. Application areas

The electronic signature can be applied to most of the objects managed in CARL Source, in particular:

• Assets
• Work orders
• Users
• ...

For each of these objects, the signature can be configured:

• On attribute modification (e.g., field value change)
• On state change (e.g., validation of a work order)

2. Enabling the signature

1. Attribute modification

• Access the [dictionary]
• Check the Signature box for the relevant attribute

2. State transitions

• Go to the [State Workflow]
• Check the Signature box on the desired transition

3. Signature process

When an action subject to signature is executed (attribute modification or state change):

1. A confirmation window appears at the time of saving.
2. The user is asked to:
   • Authenticate their identity (password or one-time code depending on configuration)
   • Enter a validation reason
3. The signature will only be recorded after successful validation.

4. Approval modes

The approval mode is configured in: System configuration → System → General → SignatureApprovalMode

Two options are available:

1. Password: The user enters their login and password.
2. One-time code: A code is sent by email to the user.
   • The email message containing the code can be customized via the [message template] TMPL_ONE_TIME_CODE.
   • The code has a limited validity period, configurable via the parameter: System configuration → System → General → SignatureOTCTimeToLive. By default, this period is 5 minutes.
   • To request a one-time code, the user must have an associated email address.

5. Traceability and logging

• Signature records: Each successful or failed signature (incorrect password, expired code, etc.) is timestamped and logged.
• Consultation: Histories are available through the [Signature consultation] feature.