Going Live

Make sure you’re ready to take your app to production.

Create an IP Allowlist

WorkOS makes use of Cloudflare to ensure security and reliability of all operations. If you are looking to create a list of allowed IP addresses for incoming requests, you can use the IP Ranges listed in the Cloudflare documentation.

Go-live checklist

Section titled Go-live checklist

Handle edge cases You may occasionally receive duplicate webhook events. To prevent duplicate processing of events, we suggest caching received events and implementing logic to skip processing seen events.

Since webhook events may be delivered out of order, i.e. not in the order in which they were generated, be sure to handle accordingly. The issued_timestamp extracted from the WorkOS-Signature header can be used to determine order.

Set and secure your Production Project’s Webhook Secret.

Set and secure your Production Project’s API key.

Ensure that your application can receive webhooks from WorkOS.

Depending on your network architecture, you may need to allow incoming traffic from api.workos.com.

WorkOS currently cannot guarantee that webhook traffic will originate from a static set of IP addresses.

Frequently asked questions

Section titled Frequently asked questions

When a directory is first linked and synced, will we recieve `dsync.user.created` webhooks for all users in that directory?

Yes, during the initial sync of any directory, you will receive dsync.user.created for all existing users in the directory.

When new required custom attributes are added in the WorkOS Dashboard settings, are existing directories required to update the attribute mapping to include this new attribute?

No, when you add a new required custom attribute to your settings, this won’t be retroactively required for directories that have already been set up and configured. However, in the WorkOS Dashboard, you will be able to navigate directly to the existing directory and fill in details for those attributes manually.

Can our customers add their own custom attributes (outside of what we have defined in the WorkOS Dashboard settings) when setting up their directory?

We do not currently support this functionality, as you have to define any custom attributes in the Dashboard first.