# Passing SSO info via Webhook

**URL:** <https://meta.discourse.org/t/passing-sso-info-via-webhook/164504>\
**Category:** Product Support\
**Created:** [September 18, 2020, 9:20pm UTC](https://meta.discourse.org/t/passing-sso-info-via-webhook/164504 "2020-09-18T21:20:53Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)\
**Post date:** [September 19, 2020, 2:13am UTC](https://meta.discourse.org/t/passing-sso-info-via-webhook/164504/6 "2020-09-19T02:13:57Z")

</div>

I know that we are cautious about adding the `external_id` to publicly viewable data, but it seems like it would be safe to add it to the webhook payload. Possibly someone on the Discourse engineering team will have ideas about that.

Looking at the code, it doesn’t seem like it would be difficult to add the `external_id` for all users to the User Event webhook through a plugin. I’d like to have a better understanding of why we’re only passing the `external_id` for admin users before suggesting that approach though.

---

_[View the full topic](https://meta.discourse.org/t/passing-sso-info-via-webhook/164504)._