## Documentation

- About
- Read First
  - What is IdentityServer
  - Installation Scenarios
- Migrations
- Bootstrapping
- Configuration & Integration
  - AdminUI Settings
  - Configuring AdminUI
  - Configuring AdminUI (NuGet)
  - Integrating with Identity Server
  - Integrating with Identity Server Custom Schema
  - Integrating with Quickstarts
  - Enabling Logging
- Installation
  - IIS
  - Azure
    - Install in Azure
    - Create Azure Web App
  - Docker
  - NuGet
- Custom Database Connections
- Custom Identity Store
  - Overview
  - Partial Implementation
  - Full Implementation
  - Tenancy With Entity Framework
  - NoSql Implementation (MongoDB)
- Custom CSP
- Users
  - Searching for Users
  - Adding Users
  - Editing Users
  - Deleting Users
  - Merge Users
  - Set User Password
  - Session Management
  - User Reports
  - Bulk User Import
- Roles
  - Creating Roles
  - Managing Roles
  - Managing Users in a Role
  - Managing Role Claims
- Claim Types
- Clients
  - Searching for Clients
  - Adding Clients
  - Adding a SAML Client
  - Adding a WS-Fed Client
  - Editing Clients
  - Deleting Clients
  - Clone Client
- Import and Export
  - Exporting Clients
  - Importing Clients
  - Importing Client Configuration with Secrets
  - Importing SAML Clients with Certificates
  - Import and Export Via the API
- Dynamic Authentication Providers
  - What is Dynamic Authentication
  - Enabling or disabling Dynamic Authentication
  - Add a Dynamic Provider
    - First Steps
    - Adding OIDC Provider
    - Adding SAML Provider
  - Edit a Dynamic Provider
    - Accessing edit view
    - Editing a OIDC Provider
    - Editing a SAML Provider
  - Deleting a Provider
  - Searching for Provider
- Resources
  - Searching for Resources
  - Creating Resources
  - Editing resources
- Webhooks
  - Webhooks
  - Endpoint Configuration
- MCP
  - Overview
  - Default Server Prompt Instructions
- User Settings Endpoints
- Access Policy
- Keys
- Auditing
- FAQs
- Troubleshooting
  - Unable to start AdminUI
  - Unable to contact IdentityServer
  - Unable to contact API
  - Unable to log in

### Webhooks

- -Webhooks
- -Webhook Configuration Page
- -Triggering Password Reset and Reset MFA
- -Triggering User Registration Webhook
- -Triggering Bulk User Registration Webhook
- -Triggering the Delete Session Webhook
- -Authorization
- -Client
- -Webhook Configuration Migration

## Webhooks

AdminUI contains three webhooks to extend AdminUI functionality and integrate it with your IdentityServer and custom Identity needs. These webhooks hold no functionality themselves but call secured endpoints to trigger outside functionality, this could within your IdentityServer instance or a separate API.

- `Password reset webhook` - This webhook allows AdminUI to trigger custom password reset logic contained elsewhere.
- `User registration webhook` - This webhook will trigger any additional account setup process your security solution might have.
- `Reset mfa webhook` - This webhook will trigger custom logic used to reset a user's Multi-Factor Authentication.
- `Delete session webhook` - This webhook will trigger when you press the delete button on a session in a session management table

## Webhook Configuration Page

As of AdminUI 5.6, you can manage your webhook configuration within AdminUI. You can manage webhook configuration by navigating to the `Webhooks` tab in the `Settings` area of AdminUI. Here you can enable/disable the three webhooks, set the endpoint URLs, and choose the desired protecting scope.

## Triggering Password Reset and Reset MFA

After navigating to a user details page, you will find the two buttons used to trigger either the `Password Reset webhook` or the `Reset MFA webhook`. If enabled in the Webhook Configuration page, clicking on the desired button will trigger the webhook.

If the webhook has not been enabled in the Webhook Configuration page, clicking on the webhook button will direct you to documentation that will inform you on how to configure the webhook.

## Triggering User Registration Webhook

If account creation succeeds and the User registration webhook has been enabled, then the webhook will trigger. If the user registration webhook has not been enabled user registration will still complete successfully, however the webhook will not be called.

The recommended way to use this webhook is to send an email to the user with a link to activate their account and set their initial password.

## Triggering Bulk User Registration Webhook

If the import of users in bulks succeeds (even partially) and the Bulk User registration webhook has been enabled, then the webhook will trigger. The webhook will only send information about to the users that were successfuly registered. If the user registration webhook has not been enabled, users registration will still complete successfully, however the webhook will not be called.

The recommended way to use this webhook is to send an email to each of the imported users with a link to activate their accounts and set their initial password.

## Triggering the Delete Session Webhook

If setup this webhook fire when you click the red x on a record in a session management table. Information about this feature can be found earlier in the documentation

This webhook will send an HTTP Delete to the url of your choosing, including the Session ID in the path. E.g: `https://localhost:5003/4b3c19ac-cce4-47c5-ac0e-eb79da45944b`

For an example of how to implement this webhook with the default Duende session management implementation see our sample

## Authorization

The webhooks will need to be to secured by your IdentityServer. You can choose a scope per endpoint in the Webhook Configuration page.

To ensure your webhooks are secured against public use, they should check for a bearer token, issued by your IdentityServer installation, that contains this scope.

The configuration of a webhook endpoint is detailed in the Webhook Endpoint Configuration page

## Client

As of AdminUI 5.6, webhook client creation/deletion is handled for you by AdminUI. On enabling your first webhook, AdminUI will inform you that a client is about to be created. The client will try and use the `ClientId` and `ClientSecret` fields within your API configuration.

If AdminUI cannot find any values for `ClientId` or `ClientSecret` configuration fields, it will use a default clientId (`admin_ui_webhooks`) and a default client secret. You can view the secret's unhashed plaintext value in the `ConfigurationEntries` table under the `webhooks` key.

The client also uses the `client_credentials` grant type.

## Webhook Configuration Migration

If you are upgrading AdminUI to a version above 5.6 and you are using webhooks, your webhook configuration will be migrated from your API configuration to the `ConfigurationEntries` table in your IdentityServer. This will happen during the first run of the API.

If you have any values against the webhook URL's in your API config or if you have both a `ClientId` and `ClientSecret`, AdminUI will create a client for you to use as a webhook client. The client will use the default `admin_ui_webhooks` protecting scope.

Previous Next