Webhooks Overview

IDWise uses webhooks as a tool for real-time communication between IDWise's backend and customer backend. They provide a way for applications to get real-time data without polling, which can be inefficient and resource-draining. Webhooks can push data immediately when a specific event occurs on the IDWise backend.

Webhook Security

We implement the following measures to enhance the security of webhooks:

• Webhook Secret: Customers can secure their webhooks using various authorization mechanisms. IDWise supports basic authentication, bearer token authorization, or custom keys set in the headers for authorization purposes.
• IP Whitelisting: Customers can configure their webhooks to accept requests only from specific IP ranges provided by IDWise, offering enhanced security and control over incoming requests.
• No PII Data: Our webhook events are designed to strictly exclude personally identifiable information (PII). They function solely as notification mechanisms to inform the customer's backend of relevant events.

Webhook Sequence Diagram

The sequence diagram below provides a comprehensive view of all webhooks supported by IDWise, highlighting when each webhook is triggered and how customers consume these webhooks.