Sign in

v4

latestOpenAPI 3.1.02026-08-08349225311.7 KB
auth
workos

Webhook

WorkOS event delivery endpoint.

Subscribed events:

  • dsync.user.created — eager membership provisioning. Customer's IdP pushed a new user via SCIM; create the local User + OrganizationMember rows so the user can sign in directly without an admin invite.
  • dsync.user.deleted — per-user revocation (offboard)
  • dsync.user.updated (state=inactive) — per-user revocation (suspend / disable; covers Okta DEPROVISIONED, Azure Disabled, etc.)
  • connection.deactivated / connection.deleted / dsync.deleted — org-wide revocation. Customer's IT admin pulled the SSO plug; force-log-out every member of the affected organization (memberships preserved so a later reconnect lets them log back in).

Idempotent on the WorkOS event id via processed_webhook_events.

post/api/auth/workos/webhook

Response

Successful Response

{"stackTrail":"paths:/api/auth/workos/webhook:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}