shared-webhooks

Handle Workos Webhook

Single endpoint for all WorkOS webhooks.

Handles:

dsync.user.created/updated/deleted (Directory Sync)
user.created/updated/deleted (AuthKit)
organization.created/updated/deleted
organization_membership.created/updated/deleted
authentication.sso_succeeded/sso_failed/sso_started/sso_timed_out (SSO audit logging)

All handlers are idempotent - safe to receive the same event multiple times.

Returns 200 OK immediately to prevent webhook retries. Processing errors are logged but don’t cause webhook failures.

POST

api

shared

webhooks

workos

Handle Workos Webhook

curl --request POST \
  --url https://api.example.com/api/v1/shared/webhooks/workos

{
  "status": "<string>",
  "eventId": "<string>"
}

200 - application/json

Successful Response

Ack for the WorkOS webhook receiver.

status

string

required

eventId

string

required

Handle Workos Webhook

curl --request POST \
  --url https://api.example.com/api/v1/shared/webhooks/workos

{
  "status": "<string>",
  "eventId": "<string>"
}