salesforce-appraiser-review-letter/force-app/main/default/externalCredentials/DocusignJWT.externalCredential-meta.xml

<?xml version="1.0" encoding="UTF-8"?>
<ExternalCredential xmlns="http://soap.sforce.com/2006/04/metadata">
    <authenticationProtocol>Oauth</authenticationProtocol>
    <externalCredentialParameters>
        <certificate>DocusignJWT</certificate>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>SigningCertificate</parameterName>
        <parameterType>SigningCertificate</parameterType>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Issuer</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>iss</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>fb613701-2c6c-44a9-9e05-3a0c17e9e3d3</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Subject</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>sub</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>d9aab149-ff54-408c-a748-baa4b56e2fcd</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Audience</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>aud</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>account-d.docusign.com</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Expiration Time</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>exp</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>{!Text(FLOOR((NOW() - DATETIMEVALUE( &quot;1970-01-01 00:00:00&quot; )) * 86400 + 3600))}</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Algorithm</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>alg</parameterName>
        <parameterType>JwtHeaderClaim</parameterType>
        <parameterValue>RS256</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Type</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>typ</parameterName>
        <parameterType>JwtHeaderClaim</parameterType>
        <parameterValue>JWT</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Issued At</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>iat</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>{!Text(FLOOR((NOW() - DATETIMEVALUE( &quot;1970-01-01 00:00:00&quot; )) * 86400))}</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Not Before</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>nbf</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>{!Text(FLOOR((NOW() - DATETIMEVALUE( &quot;1970-01-01 00:00:00&quot; )) * 86400))}</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Key ID</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>kid</parameterName>
        <parameterType>JwtHeaderClaim</parameterType>
        <parameterValue>DocusignJWT</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>Oauth</parameterName>
        <parameterType>AuthProtocolVariant</parameterType>
        <parameterValue>JwtBearer</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <description>Scope</description>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>scope</parameterName>
        <parameterType>JwtBodyClaim</parameterType>
        <parameterValue>signature impersonation spring_read spring_write</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <parameterGroup>DefaultGroup</parameterGroup>
        <parameterName>AuthProviderUrl</parameterName>
        <parameterType>AuthProviderUrl</parameterType>
        <parameterValue>https://account-d.docusign.com/oauth/token</parameterValue>
    </externalCredentialParameters>
    <externalCredentialParameters>
        <parameterName>DefaultGroup</parameterName>
        <parameterType>NamedPrincipal</parameterType>
        <sequenceNumber>1</sequenceNumber>
    </externalCredentialParameters>
    <label>DocusignJWT</label>
</ExternalCredential>