Frontegg · AsyncAPI Specification

Frontegg Webhooks

Version 1.0.0

AsyncAPI 2.6 description of Frontegg's outbound webhook surface. Frontegg signs each delivery with an `x-webhook-secret` header containing the configured signing secret, and treats any 2XX HTTP response as a successful delivery. Event names are documented by Frontegg using a `frontegg..` convention and cover authentication, user lifecycle, MFA, tenants, groups, applications, plans, API tokens, and SCIM provisioning. Payload schemas in this document model the documented event surface; Frontegg does not publish a single canonical JSON schema per event, so receiver-side payload field shape may vary by environment configuration.

View Spec View on GitHub AuthenticationAuthorizationIdentity and Access ManagementCIAMB2B SaaSMulti-TenancyRBACSSOSCIMEntitlementsOpenID ConnectIdentity FederationAsyncAPIEventsWebhooks

Channels

frontegg.user.authenticated
publish onUserAuthenticated
User signed in successfully.
A user signs in successfully.
frontegg.user.authenticatedWithSAML
publish onUserAuthenticatedWithSAML
User authenticated via SAML.
A user authenticates via SAML SSO.
frontegg.user.authenticatedWithSSO
publish onUserAuthenticatedWithSSO
User authenticated via SSO.
A user authenticates via SSO (non-SAML providers).
frontegg.user.failedAuthentication
publish onUserFailedAuthentication
User failed authentication.
A user attempted to sign in and provided invalid credentials.
frontegg.user.enrolledMFA
publish onUserEnrolledMFA
User enrolled in MFA.
A user enrolled in multi-factor authentication.
frontegg.user.disabledMFA
publish onUserDisabledMFA
User disabled MFA.
A user disabled their MFA configuration.
frontegg.user.created
publish onUserCreated
User created.
A user account was created in Frontegg.
frontegg.user.signedUp
publish onUserSignedUp
User signed up.
A user completed the sign-up flow.
frontegg.user.activated
publish onUserActivated
User activated.
A user completed account activation.
frontegg.user.deleted
publish onUserDeleted
User deleted.
A user account was deleted.
frontegg.user.updated
publish onUserUpdated
User updated.
A user profile was updated.
frontegg.user.invitedToTenant
publish onUserInvitedToTenant
User invited to tenant.
A user was invited to join a tenant.
frontegg.user.removedFromTenant
publish onUserRemovedFromTenant
User removed from tenant.
A user was removed from a tenant.
frontegg.user.joinedTenantUsingInvitationLink
publish onUserJoinedTenantUsingInvitationLink
User joined tenant via invitation link.
A user joined a tenant using an invitation link.
frontegg.user.changedPassword
publish onUserChangedPassword
User changed password.
A user changed their password.
frontegg.user.forgotPassword
publish onUserForgotPassword
User forgot password.
A user initiated a forgot-password flow.
frontegg.user.temporary.access.given
publish onUserTemporaryAccessGiven
Temporary access granted.
Temporary access was granted to a user.
frontegg.user.temporary.access.edited
publish onUserTemporaryAccessEdited
Temporary access edited.
A user's temporary access was modified.
frontegg.user.temporary.access.temporary.to.permanentd
publish onUserTemporaryToPermanent
Temporary user promoted to permanent.
A user was converted from temporary access to permanent access. Event name preserved as documented by Frontegg.
frontegg.userApiToken.created
publish onUserApiTokenCreated
User API token created.
A user API token was created.
frontegg.userApiToken.deleted
publish onUserApiTokenDeleted
User API token deleted.
A user API token was revoked.
frontegg.tenant.created
publish onTenantCreated
Tenant created.
A tenant was created.
frontegg.tenant.updated
publish onTenantUpdated
Tenant updated.
A tenant was updated.
frontegg.tenant.deleted
publish onTenantDeleted
Tenant deleted.
A tenant was deleted.
frontegg.tenantApiToken.created
publish onTenantApiTokenCreated
Tenant API token created.
A tenant API token was created.
frontegg.tenantApiToken.deleted
publish onTenantApiTokenDeleted
Tenant API token deleted.
A tenant API token was revoked.
frontegg.group.created
publish onGroupCreated
Group created.
A group was created.
frontegg.group.updated
publish onGroupUpdated
Group updated.
A group was updated.
frontegg.group.deleted
publish onGroupDeleted
Group deleted.
A group was deleted.
frontegg.group.users.added
publish onGroupUsersAdded
Users added to group.
One or more users were added to a group.
frontegg.group.users.removed
publish onGroupUsersRemoved
Users removed from group.
One or more users were removed from a group.
frontegg.group.roles.updated
publish onGroupRolesUpdated
Group roles updated.
The roles attached to a group were updated.
frontegg.account.security.domain.restricted
publish onAccountSecurityDomainRestricted
Account security domain restricted.
A domain was restricted from signing up for this account.
frontegg.user.app.assigned
publish onUserAppAssigned
User assigned to application.
A user was assigned to an application.
frontegg.user.app.unassigned
publish onUserAppUnassigned
User unassigned from application.
A user was unassigned from an application.
frontegg.tenant.app.assigned
publish onTenantAppAssigned
Tenant assigned to application.
An application was assigned to a tenant.
frontegg.tenant.app.unassigned
publish onTenantAppUnassigned
Tenant unassigned from application.
An application was unassigned from a tenant.
frontegg.tenant.plan.assigned
publish onTenantPlanAssigned
Plan assigned to tenant.
A plan was assigned to a tenant.
frontegg.tenant.plan.unassigned
publish onTenantPlanUnassigned
Plan unassigned from tenant.
A plan was unassigned from a tenant.
frontegg.user.plan.assigned
publish onUserPlanAssigned
Plan assigned to user.
A plan was assigned to a user.
frontegg.user.plan.unassigned
publish onUserPlanUnassigned
Plan unassigned from user.
A plan was unassigned from a user.
frontegg.scim.user.created
publish onScimUserCreated
SCIM user created.
A user was provisioned via SCIM.
frontegg.scim.user.updated
publish onScimUserUpdated
SCIM user updated.
A SCIM-provisioned user was updated.
frontegg.scim.user.deleted
publish onScimUserDeleted
SCIM user deleted.
A SCIM-provisioned user was deprovisioned.
frontegg.scim.group.created
publish onScimGroupCreated
SCIM group created.
A group was created via SCIM.
frontegg.scim.group.updated
publish onScimGroupUpdated
SCIM group updated.
A SCIM group was updated.
frontegg.scim.group.deleted
publish onScimGroupDeleted
SCIM group deleted.
A SCIM group was deleted.

Messages

✉
UserAuthenticated
User Authenticated
A user successfully signed in.
✉
UserAuthenticatedWithSAML
User Authenticated With SAML
✉
UserAuthenticatedWithSSO
User Authenticated With SSO
✉
UserFailedAuthentication
User Failed Authentication
✉
UserEnrolledMFA
User Enrolled MFA
✉
UserDisabledMFA
User Disabled MFA
✉
UserCreated
User Created
✉
UserSignedUp
User Signed Up
✉
UserActivated
User Activated
✉
UserDeleted
User Deleted
✉
UserUpdated
User Updated
✉
UserInvitedToTenant
User Invited To Tenant
✉
UserRemovedFromTenant
User Removed From Tenant
✉
UserJoinedTenantUsingInvitationLink
User Joined Tenant Using Invitation Link
✉
UserChangedPassword
User Changed Password
✉
UserForgotPassword
User Forgot Password
✉
UserTemporaryAccessGiven
User Temporary Access Given
✉
UserTemporaryAccessEdited
User Temporary Access Edited
✉
UserTemporaryToPermanent
User Temporary To Permanent
✉
UserApiTokenCreated
User API Token Created
✉
UserApiTokenDeleted
User API Token Deleted
✉
TenantCreated
Tenant Created
✉
TenantUpdated
Tenant Updated
✉
TenantDeleted
Tenant Deleted
✉
TenantApiTokenCreated
Tenant API Token Created
✉
TenantApiTokenDeleted
Tenant API Token Deleted
✉
GroupCreated
Group Created
✉
GroupUpdated
Group Updated
✉
GroupDeleted
Group Deleted
✉
GroupUsersAdded
Group Users Added
✉
GroupUsersRemoved
Group Users Removed
✉
GroupRolesUpdated
Group Roles Updated
✉
AccountSecurityDomainRestricted
Account Security Domain Restricted
✉
UserAppAssigned
User Application Assigned
✉
UserAppUnassigned
User Application Unassigned
✉
TenantAppAssigned
Tenant Application Assigned
✉
TenantAppUnassigned
Tenant Application Unassigned
✉
TenantPlanAssigned
Tenant Plan Assigned
✉
TenantPlanUnassigned
Tenant Plan Unassigned
✉
UserPlanAssigned
User Plan Assigned
✉
UserPlanUnassigned
User Plan Unassigned
✉
ScimUserCreated
SCIM User Created
✉
ScimUserUpdated
SCIM User Updated
✉
ScimUserDeleted
SCIM User Deleted
✉
ScimGroupCreated
SCIM Group Created
✉
ScimGroupUpdated
SCIM Group Updated
✉
ScimGroupDeleted
SCIM Group Deleted

Servers

https
subscriber {customer_webhook_url}
The HTTPS endpoint configured by a Frontegg customer (vendor) inside the Frontegg portal under Configurations -> Hooks. Frontegg POSTs JSON payloads to this URL when subscribed events fire.

AsyncAPI Specification

Raw ↑ 
asyncapi: '2.6.0'
info:
  title: Frontegg Webhooks
  version: '1.0.0'
  description: |
    AsyncAPI 2.6 description of Frontegg's outbound webhook surface. Frontegg signs each
    delivery with an `x-webhook-secret` header containing the configured signing secret,
    and treats any 2XX HTTP response as a successful delivery. Event names are documented
    by Frontegg using a `frontegg.<resource>.<action>` convention and cover authentication,
    user lifecycle, MFA, tenants, groups, applications, plans, API tokens, and SCIM
    provisioning. Payload schemas in this document model the documented event surface;
    Frontegg does not publish a single canonical JSON schema per event, so receiver-side
    payload field shape may vary by environment configuration.
  contact:
    name: Frontegg Developers
    url: https://developers.frontegg.com
  license:
    name: Refer to Frontegg Terms
    url: https://frontegg.com/terms
  termsOfService: https://frontegg.com/terms
defaultContentType: application/json
tags:
  - name: Authentication
    description: Login and sign-in events
  - name: MFA
    description: Multi-factor authentication enrollment events
  - name: User
    description: User lifecycle events
  - name: Tenant
    description: Tenant (account) lifecycle events
  - name: Group
    description: Group membership and role assignment events
  - name: Application
    description: User/tenant application assignment events
  - name: Plan
    description: Plan assignment events
  - name: APIToken
    description: User and tenant API token events
  - name: SCIM
    description: SCIM provisioning events


# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/frontegg/refs/heads/main/asyncapi/frontegg-webhooks-asyncapi.yml

Work with this as data

Every AsyncAPI spec here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for asyncapi

4 MCP tools reach this
  • find_asyncapisBrowse and filter every AsyncAPI spec in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This AsyncAPI spec 
curl "https://apis.io/api/v1/asyncapis/frontegg-webhooks-asyncapi"
All asyncapi 
curl "https://apis.io/api/v1/asyncapis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.