Configure webhooks

By creating an outgoing webhook, you can trigger a notification in a 3rd party system when a specified event occurs in IAS. You can define triggers for the webhook and the target that should respond to the trigger in IAS.

Create a target

Complete the following steps to create a target for the webhook. The target URL receives the message that something has occurred in IAS and initiates the appropriate response in the third-party service.

Teams and Slack

Teams and Slack are not yet supported as these require a specific message format that the generic format does not cover.

A target is required to create an integration:

  1. In Settings>Notifications, under Notifications>Webhook Notifications select Manage and Create Webhook Integrations.
  2. Click Create Webhook Target.
  3. Enter a name and the target URL for the third-party service.
  4. Optional: You can enable HMAC by specifying a hash algorithm and secret key.
  5. Click Create Webhook Target.

Create an integration

An integration defines the triggering event and any filters that can be used on those events. Complete the following steps to create a webhook integration:

  1. In Settings>Notifications, under Notifications>Webhook Notifications select Manage and Create Webhook Integrations.
  2. Name Webhook Integration: Name the integration and provide a brief description. Click Next.
  3. Configure Webhook Target: Select a target or create a new one. Click Next.
  4. Configure Trigger Type and Filter: Select the trigger category and trigger types. Click Filter and select the specific apps the integration applies to.
  5. Click Create Webhook Integration.

Output

When a scan completes, the following is sent to the 3rd party system:

  • App ID
  • App Name
  • Scan ID
  • Scan Config Name
  • Scan Status: Complete
  • Vulnerabilities found (Count)
  • Scan Type
  • Submit time
  • Completion Time
  • Scan Deeplink (link to specific IAS scan)