Launch Checklist

Make sure you’re ready to take your app to production.

Create an IP Allowlist

WorkOS sends webhooks from a fixed set of IP addresses. If you are looking to create a list of allowed IP addresses for webhooks, use these IP addresses:

WorkOS IP addresses

 3.221.3.224
54.144.9.196
54.172.232.96
52.87.96.186

Go-live checklist

Handle edge cases.

You may occasionally receive duplicate webhook events. To prevent duplicate processing of events, we suggest caching received events and implementing logic to skip processing seen events.

Since webhook events may be delivered out of order, i.e. not in the order in which they were generated, be sure to handle accordingly. The issued_timestamp extracted from the WorkOS-Signature header can be used to determine order.

Set and secure your Production Project’s Webhook Secret.

Set and secure your Production Project’s API key.

Ensure that your application can receive webhooks from WorkOS. Depending on your network architecture, you may need to allow incoming traffic from api.workos.com.

Frequently asked questions

When a directory is first linked and synced, will we recieve `dsync.user.created` webhooks for all users in that directory?

Yes, during the initial sync of any directory, you will receive dsync.user.created for all existing users in the directory.

When new required custom attributes are added in the WorkOS Dashboard settings, are existing directories required to update the attribute mapping to include this new attribute?

No, when you add a new required custom attribute to your settings, this won’t be retroactively required for directories that have already been set up and configured. However, in the WorkOS Dashboard, you will be able to navigate directly to the existing directory and fill in details for those attributes manually.

Can our customers add their own custom attributes (outside of what we have defined in the WorkOS Dashboard settings) when setting up their directory?

We do not currently support this functionality, as you have to define any custom attributes in the Dashboard first.