# Event Hook verification times out

**URL:** <https://devforum.okta.com/t/event-hook-verification-times-out/11180>\
**Category:** Questions\
**Created:** [October 5, 2020, 7:32am UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180 "2020-10-05T07:32:51Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hekmil](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@Hekmil](https://devforum.okta.com/u/Hekmil)\
**Post date:** [October 5, 2020, 7:32am UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/1 "2020-10-05T07:32:51Z")

</div>

Hi,

I’m trying to verify my connection to my event Hook hosted on a Tomcat9 server installed on a virtual machine hosted on the web.

My code is very simple as for now I’m only trying to make this connection work first. Here you can see my code (all java classes are prepared JSON object from the documentation’s payloads) :

 ![image](https://global.discourse-cdn.com/oktadev/original/2X/8/8b43ddd5a50e119b4f9bef26bdc03c3e3d0403cd.png)

I can of course process the hook from my browser and manipulate it with Postman, for example if I’m sending an GET HTTPS request with Okta’s header to verify I’m getting an object JSON in the body as I should.

 ![image](https://global.discourse-cdn.com/oktadev/original/2X/2/284302b34ada24c897cbce30e2850b8fc9eaa8d1.png)

I really don’t know what is failling here, thank you for any help !

---

<div class="post-metadata">

**Author:** ![warren](https://avatars.discourse-cdn.com/v4/letter/w/97f17d/32.png) [@warren](https://devforum.okta.com/u/warren)\
**Post date:** [October 5, 2020, 5:25pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/2 "2020-10-05T17:25:28Z")

</div>

Do you see error message in your Okta system logs?

---

<div class="post-metadata">

**Author:** ![Hekmil](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@Hekmil](https://devforum.okta.com/u/Hekmil)\
**Post date:** [October 6, 2020, 12:09pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/3 "2020-10-06T12:09:44Z")

</div>

![image](https://global.discourse-cdn.com/oktadev/original/2X/4/4fd370be4852643e8fc9e776dbcf18f00342167e.png)

Yes but nothing usefull

---

<div class="post-metadata">

**Author:** ![gpadma](https://avatars.discourse-cdn.com/v4/letter/g/858c86/32.png) [@gpadma](https://devforum.okta.com/u/gpadma)\
**Post date:** [October 6, 2020, 7:17pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/4 "2020-10-06T19:17:00Z")

</div>

Hi @Hekmil,

Does sending a HTTP GET from your postman also pass ? Okta currently supports only HTTP as mentioned in [https://developer.okta.com/docs/reference/api/event-hooks/#channel-object](https://developer.okta.com/docs/reference/api/event-hooks/#channel-object).

If a HTTP GET from your postman passes, but still the verification request from Okta fails, would you be able to get the screen shot of your event hook configuration from okta dashboard (Workflow-\>EventHooks-\>{your Event Hook}) and a captured network trace using a tool like fiddler for further analysis ?

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [October 7, 2020, 2:46am UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/5 "2020-10-07T02:46:52Z")

</div>

Hi @Hekmil

Based on our internal logs, the event hook is already verified, so the one-time-verification is not needed in this case. When the event hook is triggered on application.user\_membership.add, your web server’s endpoint returned a 500 error on the POST request from Okta.

Can you please check if the endpoint supports POST requests and, if yes, if it accepts the JSON payload from Okta?

---

<div class="post-metadata">

**Author:** ![Hekmil](https://avatars.discourse-cdn.com/v4/letter/h/e47774/32.png) [@Hekmil](https://devforum.okta.com/u/Hekmil)\
**Post date:** [October 7, 2020, 2:58pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/6 "2020-10-07T14:58:37Z")

</div>

Hi,

I solved this issue which was coming from a self-signed certificate.

Yes to both questions, my code supports POST and makes an API call using some data of the JSON payload.

I don’t know where it’s coming from right now. Is there a way to generate payload to simulate event hook trigger ?

---

<div class="post-metadata">

**Author:** ![quy](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/quy/32/2206_2.png) [@quy](https://devforum.okta.com/u/quy)\
**Post date:** [October 13, 2020, 10:22pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/7 "2020-10-13T22:22:45Z")

</div>

Hekmil,

We are actually planning to beta launch a new feature to allow you to preview an Event Hook (similar to the [Inline Hook Preview feature](https://help.okta.com/en/prod/Content/Topics/automation-hooks/preview-inline-hooks.htm)) soon so check back early next month in your preview Org to try it out.

---

<div class="post-metadata">

**Author:** ![quy](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/quy/32/2206_2.png) [@quy](https://devforum.okta.com/u/quy)\
**Post date:** [November 6, 2020, 8:11pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/8 "2020-11-06T20:11:28Z")

</div>

Preview for Event Hooks is now available as a Beta feature for Preview orgs if you want to try it out. Just navigate to the Settings \> Feature page on your Okta Admin Dahsboard and scroll down to the “Open betas” section to turn it on. We would love your feedback on it.

---

<div class="post-metadata">

**Author:** ![flypenguin](https://avatars.discourse-cdn.com/v4/letter/f/e480ec/32.png) [@flypenguin](https://devforum.okta.com/u/flypenguin)\
**Post date:** [November 7, 2020, 12:12pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/9 "2020-11-07T12:12:46Z")

</div>

> [@Hekmil](#):
>
> I solved this issue which was coming from a self-signed certificate.

hi @Hekmil or @quy, does that mean the okta event hooks don’t connect to HTTPS endpoints using self-signed certs? i have a use case for this and I don’t need to start coding if this is the case. thanks in advance!

---

<div class="post-metadata">

**Author:** ![quy](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/quy/32/2206_2.png) [@quy](https://devforum.okta.com/u/quy)\
**Post date:** [December 23, 2020, 11:47pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/10 "2020-12-23T23:47:31Z")

</div>

@flypenguin We still require the Hooks endpoint to be a HTTPS endpoint. You can use this SSL tool to check if your endpoint has a valid server certificate that can be used:

> **[SSL Checker](https://www.sslshopper.com/ssl-checker.html)**

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [May 10, 2021, 1:38pm UTC](https://devforum.okta.com/t/event-hook-verification-times-out/11180/11 "2021-05-10T13:38:16Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
