Manage webhooks
Webhooks enable you to receive real-time user event notifications, such as when a user is created, deleted, or logs in to an app. To subscribe to webhook notifications, you need an endpoint (URL) that is set up to receive the events.
For more, see How webhooks work and Set up webhooks.
Note
Event notifications are not sent until a webhook is verified and enabled.
View webhooks
The Webhooks page lists all existing webhooks and their status, name, and description. To view the Webhooks page, in the side menu select Events > Webhooks.
Create, edit, or delete webhooks
You can manage your webhooks from the Webhooks page:
- Create a webhook by clicking + Add webhook and configuring Webhook settings .
- Edit a webhook by clicking and then Edit .
- Delete a webhook by clicking and then Delete .
Enable or disable webhooks
Enable or disable a webhook by clicking and then selecting Enable or Disable. Notification are only sent to enabled webhooks.
Webhook settings
You can access webhook settings from the Webhooks page by clicking the relevant webhook in the table:
These are the webhook settings:
- Webhook name (required): The name of the webhook to display in the Admin Portal.
- Description : The webhook's description.
- URI (required): The URI to which events are sent. Events must be sent via HTTPS.
- API key (required): An opaque value used to determine that the webhook originated from Mosaic. This value should be kept secret and only used for Mosaic webhooks. See Validate notification .
- Events (required): The types of events for which you want to receive notifications.
Note
The User requested deletion
event type presented in the Admin Portal is not currently supported.
Events
You can subscribe to notifications for the following types of events:
Event | Description |
---|---|
User created |
User was created by an admin, or implicitly upon authenticating |
User updated |
User's profile was updated |
User deleted |
User was deleted |
User added to app |
User was associated with an app |
User removed from app |
User was removed from an app |
User logged in |
User successful authenticates |
User logged out |
User logs out of the session (via Logout API) |
User suspended |
User was suspended |
User unsuspended |
User status was changed from suspended to active |
User password lock |
A lockout applies on user password authentication |
Orchestrated user login |
User was logged in within an orchestrated journey |
Failed OTP attempt |
Last email or phone verification with OTP failed |
Note
Events reflect actions performed via Admin Portal, APIs, or implicitly as part of a flow (if applicable).