I need help setting up a connection between Facebook Workplace and Zapier using webhooks. Here’s what I’m trying to do:
I created a custom app in Facebook Workplace and then went to Zapier to set up a webhook trigger. Zapier gave me a webhook URL which I added to my Workplace integration settings.
The problem is that while Zapier shows the test is working fine, Facebook Workplace keeps throwing an error about webhook signature or token configuration being incorrect.
Has anyone successfully connected these two platforms before? What am I missing in the setup process? Any tips on how to properly configure the webhook authentication would be really helpful.
Had similar issues when I first attempted this integration last year. The signature validation problem usually stems from Facebook Workplace expecting a specific response format during the initial webhook verification process. When Workplace sends the initial GET request with the hub.challenge parameter, your endpoint needs to return that exact challenge value as plain text, not wrapped in JSON or any other format. Most people miss this detail and focus only on the signature verification for POST requests. Check your Zapier webhook configuration to ensure it’s handling both the verification GET request and the actual POST webhook events correctly. You might need to set up a separate endpoint for the initial verification step before routing the actual webhook data to Zapier. Also verify that your app’s webhook subscription is set to the correct callback URL and that all required permissions are granted in the Workplace developer console.
The signature verification issue you’re encountering is pretty common with Facebook Workplace webhook setups. What worked for me was making sure I had the app secret properly configured in both platforms. Facebook Workplace uses HMAC-SHA1 to sign webhook payloads, and you need to verify this signature on the receiving end. The tricky part is that Zapier’s standard webhook triggers don’t handle Facebook’s signature verification automatically. I ended up having to use Zapier’s Code by Zapier action to manually verify the webhook signature using the raw payload and my app secret. Also double-check that your webhook URL in Workplace settings matches exactly what Zapier provided, including any query parameters. Another thing to verify is that your app has the correct permissions enabled in the Workplace Admin Panel for the events you want to receive.
check if youre using the correct webhook version in workplace settings - i had same problem and turns out i was using v2.8 when zapier expected v3.0 or higher. also make sure the verify token matches exactly what you put in zapier, its case sensitve