Source type

WorkOS Source Configuration

WorkOS sources receive organization, directory sync, audit log, and identity events with timestamped WorkOS signatures.

WORKOSPOST, PUT, PATCH, DELETEWebhook SecretIdentity
WorkOS webhooks documentationAll source types
WorkOS sends webhook traffic to a FastHook source, FastHook validates the provider contract, records the request, and routes accepted events through connections to destinations.WorkOSProviderPOST, PUT, PATCH, DELETESignedFastHookSource URLWORKOSProvider credentialsignatureVerify before queue401 on auth failure405 on wrong methodAcceptedRequestverified: trueConnections route the accepted request to destinationsFilters, transformations, retries, replay, and destination signatures stay downstream from source verification.

WorkOS configuration

Create a WorkOS source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Webhook Secret values for provider signature. FastHook uses these settings to validate each WorkOS delivery before it enters the routing workflow.

Source Type

WORKOS

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

Webhook Secret

WorkOS source config
{
  "type": "WORKOS",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "WORKOS",
      "webhook_signing_secret": "provider-secret"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

WorkOS request contract

FastHook verifies workos-signature by signing timestamp + '.' + raw body with HMAC-SHA256 and millisecond timestamp validation.

POSTPUTPATCHDELETE

WorkOS headers

Preserve workos-signature when sending WorkOS test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

workos-signature

Contains timestamp t and v1 signature values.

WorkOS setup

  1. Create a WorkOS webhook endpoint that points at the FastHook Source URL.
  2. Paste the WorkOS webhook secret into FastHook.
  3. Route identity and directory events to different downstream services when ownership differs.

Continue with WorkOS