j
No Results
Search Tips:
- Please consider misspellings
- Try different search keywords
Webhook Data Action Targets in Data Cloud
Send a Data Cloud data action event to a webhook target and protect the message integrity with a Salesforce-generated secret key. A webhook is a type of HTTP request that’s triggered by an event in a source system and sent to a destination system with a payload. A webhook is event-driven rather than request-driven. Webhooks are sent automatically when an event is triggered in the source system. The secret key based signature validates the payload requests sent from Salesforce.
A webhook transports HTTP payload with events in the format of DataObjectDataChgEvent.
{
"creationDateTime": "DateTime: Payload creation time at the service calling webhook",
"count": "Number: Count of events in this payload",
"schemas": [ { "schemaId": "Action Name of schema", schema : "Schema of Event Payload in Action" } ], //Array of Schemas for different event payload
"events": [Array of DataObjectDataChgEvent Events],
}-
Generate a Secret Key for Signature Validation
To protect a webhook system from malicious attacks, generate a secret key for validation. If you don't generate a secret key, targets don't receive a payload, and calls are marked with Signing Key Not Found. In Data Cloud, data actions use the HMACSHA256 signature algorithm.
-
We recommend regenerating the secret key used in your webhook system at least every 12 months. After you regenerate a secret key, it takes up to 15 minutes to be effective. Until the new key is configured for use, validations at the webhook target fail.
-
Payload-based signature validates the payload requests sent to your webhook system from Salesforce.
-
To validate the signature, you can use this sample Java code. Make sure to perform JSON escaping on the payload received at the target.
See Also
j