---
title: "Webhook"
method: POST
path: "/api/auth/workos/webhook"
tags: ["auth", "workos"]
---

# Webhook

`POST /api/auth/workos/webhook`

WorkOS event delivery endpoint.

Subscribed events:
* ``dsync.user.created`` — eager membership provisioning. Customer's
  IdP pushed a new user via SCIM; create the local User +
  OrganizationMember rows so the user can sign in directly without
  an admin invite.
* ``dsync.user.deleted`` — per-user revocation (offboard)
* ``dsync.user.updated`` (state=inactive) — per-user revocation
  (suspend / disable; covers Okta DEPROVISIONED, Azure Disabled, etc.)
* ``connection.deactivated`` / ``connection.deleted`` /
  ``dsync.deleted`` — org-wide revocation. Customer's IT admin
  pulled the SSO plug; force-log-out every member of the affected
  organization (memberships preserved so a later reconnect lets
  them log back in).

Idempotent on the WorkOS event id via ``processed_webhook_events``.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api.md) · [All operations](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quadrillion/quadrillion-cloud-api/versions/399077308c86/schema)