> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Password events

Password events notify you when password-related changes occur. When a password event is triggered, IDaaS sends an HTTP POST request to your configured webhook URL with a JSON payload containing the event details.

## Payload structure

Every password event payload has this structure:

```json
{
  "id": "019cf7b5-61c1-7017-bc39-9309c400e1f3",
  "type": "password.updated",
  "accountId": "fba02d5c-2f79-4cfd-91f5-6bd454e97ab3",
  "eventTime": "2026-03-16T17:33:05Z",
  "data": {
    // Event-specific data here
  }
}
```

The `data` object contains event-specific fields. See the event examples later on this page for the full `data` object for each event type.

### Top-level fields

| Field       | Type   | Description                                        |
| ----------- | ------ | -------------------------------------------------- |
| `id`        | string | Unique identifier for this webhook delivery        |
| `type`      | string | The event that occurred (e.g., `password.updated`) |
| `accountId` | string | Your account identifier                            |
| `eventTime` | string | When the event occurred (ISO 8601 format)          |
| `data`      | object | Details about what happened (varies by event type) |

## Event types

### password.updated

Triggered when a user's password is updated.

**Example payload:**

```json
{
  "id": "019cf7b5-61c1-7017-bc39-9309c400e1f3",
  "type": "password.updated",
  "accountId": "fba02d5c-2f79-4cfd-91f5-6bd454e97ab3",
  "eventTime": "2026-03-16T17:33:05Z",
  "data": {
    "subject": "7a578db7-e8c8-421c-b5aa-2975f1418932",
    "subjectName": "john",
    "subjectType": "USER",
    "resourceName": "User Portal",
    "sourceIp": "104.30.161.19",
    "entityType": "USERPASSWORDS",
    "entityId": "7a578db7-e8c8-421c-b5aa-2975f1418932",
    "entityName": "john"
  }
}
```

The `data` object includes the following fields:

| Field          | Description                                              |
| -------------- | -------------------------------------------------------- |
| `subject`      | ID of the user whose password was updated                |
| `subjectName`  | Username of the user whose password was updated          |
| `subjectType`  | Always `USER`                                            |
| `resourceName` | Where the password update occurred (e.g., "User Portal") |
| `sourceIp`     | IP address from which the password update originated     |
| `entityType`   | Always `USERPASSWORDS` for password update events        |
| `entityId`     | ID of the user whose password was updated                |
| `entityName`   | Username associated with the password                    |