I'm nervous that Civi's documentation for Authorize.net is outdated. There appear to be cases where recurring ARB payments are processed by Authorize but the related Civi contributions & memberships are not updated. This doc seems to require the use of a "Silent Post", but tech support at Authorize said Silent Post is deprecated. Other systems that integrate with Authorize use webhooks instead of the Silent Post. Should I be using webhooks instead of the Silent Post? If so, should I use the same format, like this for Wordpress:


If so continued... which events should be listened to?

  • All Events
  • Customer Events
  • Subscription Events
  • Payment Events

1 Answer 1


You want to use the authnet extension instead which uses webhooks and not a silent post URL.

Here is the setup guide and if you are migrating from legacy core authnet. The webhooks are created automatically if you check the system status page in Civi to generate them. FYI, the webhooks used are: enter image description here

  • 1
    This is a correct answer, and one I would endorse - but to be clear, the "Silent Post URL" has been deprecated for many years and I don't think it will be disabled in the next several years. So it's good to use the authnet extension, but Silent Post URL is still a workable solution. Commented Apr 30, 2022 at 19:45
  • Agreed. I am wondering if it would work out okay to have the core authnet processor (using silent post URL and needed for existing ARB's) and the lab.civicrm.org/extensions/authnet (using webhook) in use at the same time? I think so.
    – Andy Burns
    Commented May 4, 2022 at 18:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.