Configure Site-Global Shufti Identity Verification

A Joomla Super User can configure a site-wide Shufti profile for new QCDS Level 2 Requests. When enabled, this Global profile overrides sender-owned account-level Identity Verification for new Level 2 participants.

Open the Global Provider Form

  1. In Joomla Administrator, open QC Digital Signature.
  2. Select Identity Verification.
  3. Choose Shufti as the Provider.

The Global card shows the current connection state, provider, pending bound participants, and Last tested timestamp. Only a Super User can manage the Global profile.

Enter the Shufti Credentials

Enter the Shufti Client ID and Shufti Secret Key issued for the provider account. QCDS encrypts these values locally before storing them. They are not sent to the signer browser.

If the profile already has credentials, leaving a credential input blank preserves the existing stored value. Enabling Global Identity Verification requires both a stored Client ID and Secret Key.

Save and Verify the Connection

  1. Select Enable Global Site Identity Verification for new requests when this profile should control new Level 2 Requests.
  2. Click Save Global Identity Settings.
  3. When credentials are present, QCDS automatically performs the provider connection test after saving.

The Shufti test calls the provider's account-information endpoint, requires a successful HTTP response, and verifies the authenticity of the signed provider response. QCDS also records whether the provider reports a Trial / Test or Production account and stores the test time and health state.

The administrator message can also report the provider balance when Shufti returns balance information.

What Counts as Ready

For Shufti, QCDS considers a profile ready for Level 2 verification when valid credentials are present, the connection health is connected/ready, and the detected account mode is Trial/Test or Production. A connected response that does not establish one of those recognized modes is not treated as fully ready for new Level 2 verification.

Changing or Removing the Global Profile

Changing providers affects new Requests only. Already-sent Requests remain bound to their original provider profile. If you use Remove Credentials, QCDS disables that profile and clears its provider credentials; pending Level 2 participants that depend on it can become unavailable until the profile is repaired.

Community Discussion

Want to compare workflows, share practical tips, or discuss how you use this QCDS feature? Visit the QC Digital Signature Community. For private support, bug reports, account-specific issues, or feature requests, use the QuantaCade support system.