Skip to content

Authentication & verification

Webhook Authentication

If your webhook requires authentication, it can be set up during webhook configuration. If you register the webhook programmatically, the JSON for a webhook config is of the format: 

{
    "Method": "Header",
    "Key": "MyAuthHeader",
    "Value": "AuthKey"
}

The following authentication methods are supported:

  • Header: A HTTP Header with a header key and a header value.
  • BasicAuth: Uses the Authorization header, with key:UserName, value:password
  • Kerberos: Uses username and password with optional domain to auth with Kerberos. Key: domain@username and Value:password. Called with ImpersonationLevel: None, Preauthenticate: true, KeepAlive: true and AuthenticationLevel: MutualAuthRequested.

Webhook verification

If you want to verify that your webhook has not been tampered with, the webhook includes RFC-9421-compliant headers that can be used to verify the request using our public organizational certificate, which you can download here.