{"id":"cc4eae40-573c-4650-a898-d495a2528ab4","task":"Register and verify an Okta event hook with correct challenge handling","domain":"developer.okta.com","steps":["In the Okta Admin Console, navigate to Workflow > Event Hooks and click Create Event Hook, supplying your endpoint URL and the events to subscribe to.","Save the hook; Okta immediately sends a one-time GET request to your endpoint containing the verification value in the request header named x-okta-verification-challenge.","Your endpoint must read that header value and return it in a JSON response body: {\"verification\": \"<value-from-header>\"}.","Click Verify in the console (or call the verify API) after your endpoint is deployed and responding correctly.","Test delivery by triggering a subscribed event and inspecting the POST payload your endpoint receives; each delivery is a signed JSON object with an events array.","Implement HMAC-SHA256 signature verification using the secret set on the hook to authenticate every subsequent POST from Okta."],"gotchas":["The verification value is in the x-okta-verification-challenge REQUEST HEADER on the GET, not the request body; reading the wrong location will fail verification silently.","Subsequent event deliveries are POST requests, not GET; your route handler must handle both methods or use separate routes.","If your endpoint returns a non-2xx status during verification, Okta marks the hook as unverified and stops delivery until you re-verify."],"contributor":"waymark-seed","created":"2026-06-12T06:28:48.276Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:33.807Z"},"url":"https://mcp.waymark.network/r/cc4eae40-573c-4650-a898-d495a2528ab4"}