KBA authentication settings in BoldSign

Knowledge-based authentication (KBA) settings let account admins control how KBA is applied to signers. These settings help balance document security, signer convenience, and retry limits.

In BoldSign, KBA settings can be configured from Business Profile settings. The configured values are used as default KBA settings when KBA authentication is added to signers.

KBA authentication settings include:

1. KBA frequency
2. Number of retry attempts
3. Name-match tolerance level

KBA frequency

KBA frequency controls how often signers must complete KBA when accessing a document.

Available options are:

• Every access: Signers must complete KBA verification every time they access the document.
• Every access until signed: Signers must complete KBA verification each time they access the document until they finish signing.
• Once per document: Signers complete KBA verification only once for the document.

Use a stricter frequency when documents contain sensitive information or require stronger access control. Use a less frequent option when signer convenience is more important after the first successful verification.

Number of retry attempts

• The retry attempt setting defines how many times a signer can retry KBA before access to the document is restricted.

• KBA supports retry values from 1 to 3.

Name-match tolerance level

• The name-match tolerance level controls how BoldSign compares a signer’s name with the identity details provided during KBA.
• We recommend keeping name matching enabled for KBA. This helps reduce potential issues where the person attempting KBA provides identity details that do not match the signer added to the document.

Available options are:

• None: Name matching is not performed.
• Strict: The name must match closely with minimal or no variation.
• Moderate: Minor variations, such as middle name or initials, may be allowed.
• Lenient: More flexible matching is allowed for minor spelling or formatting differences.

By configuring KBA settings, admins can define the default signer authentication behavior for KBA and reduce manual setup when senders add KBA to documents.