I'm nervous that Civi's documentation for Authorize.net is outdated. There appear to be cases where recurring ARB payments are processed by Authorize but the related Civi contributions & memberships are not updated. This doc seems to require the use of a "Silent Post", but tech support at Authorize said Silent Post is deprecated. Other systems that integrate with Authorize use webhooks instead of the Silent Post. Should I be using webhooks instead of the Silent Post? If so, should I use the same format, like this for Wordpress:


If so continued... which events should be listened to?

  • All Events
  • Customer Events
  • Subscription Events
  • Payment Events

1 Answer 1


You want to use the authnet extension instead which uses webhooks and not a silent post URL.

Here is the setup guide and if you are migrating from legacy core authnet. The webhooks are created automatically if you check the system status page in Civi to generate them. FYI, the webhooks used are: enter image description here

  • 1
    This is a correct answer, and one I would endorse - but to be clear, the "Silent Post URL" has been deprecated for many years and I don't think it will be disabled in the next several years. So it's good to use the authnet extension, but Silent Post URL is still a workable solution. Apr 30, 2022 at 19:45
  • Agreed. I am wondering if it would work out okay to have the core authnet processor (using silent post URL and needed for existing ARB's) and the lab.civicrm.org/extensions/authnet (using webhook) in use at the same time? I think so. May 4, 2022 at 18:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.