# Notifications
### Email Templates Overview
Administrators can customize email notifications sent during Lifecycle Management and Access Request workflows. These emails can include instructions, unique branding, and placeholders for metadata specific to the event (such as entity names, action types, or request details). Each notification type (usage) can have its own customized template.
Notification templates support HTML and CSS. They can include links to external images or you can upload small files to Veza. This document includes steps to configure templates in Veza using the notifications API, and a reference for event types, default templates, and supported placeholders.
{% hint style="info" %}
**Template Management**: Currently, notification templates can only be managed via the Notification Templates API. Template management through the Veza UI is not yet available.
{% endhint %}
{% hint style="info" %}
**Access Reviews Notification Templates**: For access review workflow notifications, see [Access Reviews Notification Templates](/4yItIzMvkpAvMVFAamTf/developers/api/notification-templates.md).
{% endhint %}
### Managing notification templates
### Custom Email Templates
In addition to event-specific templates, you can create **custom email templates** that are not tied to specific lifecycle events. These reusable templates allow you to define notification content once and use it across Send Notification actions and action notification settings. Custom email templates are:
* **Reusable**: Single template for multiple workflows and actions
* **Event-independent**: Not associated with a specific lifecycle event type
* **Flexible**: Can be used in both Send Notification actions and action notification settings (`on_success`/`on_failure`)
* **Standard placeholder support**: Supports all the same placeholders as event-based templates
To create a custom email template:
1. Navigate to **Lifecycle Management** > **Settings** > **Notifications**
2. Click **Create Template**
3. Select **For Custom Email** (as opposed to "For Event")
4. Define your template name, subject, and body using HTML and placeholders
5. Save the template
To use a custom template, select it when configuring the Send Notification action, or in Action Notification Settings:
* **Send Notification action**: Choose from the "Select Email Template" dropdown when configuring the action
* **Action Notification Settings**: Select the template for `on_success` or `on_failure` email notifications on any action
When you select "Default template" in these dropdowns, the system uses the event-based template appropriate for the event. When you select a custom template, that template is used regardless of the specific event being processed.
{% hint style="info" %}
Custom templates support all standard placeholders documented in the [Placeholders](#placeholders) section. The available values depend on the context in which the template is used (e.g., action notifications have action-related placeholders, event notifications have event-related placeholders).
{% endhint %}
### Default Templates
The system provides built-in templates for all Lifecycle Management and Access Request events. These templates use placeholders that are automatically replaced with actual values when notifications are sent.
**Generic Failure Template**
When specific event templates aren't available or when events fail, the system uses a generic failure template:
**Subject**: `Lifecycle job {{EVENT_TYPE}} has failed`
**Body**:
```html
Here is the notification that lifecycle job has failed.
Error message: {{EVENT_ERROR_MESSAGE}}
For reference:
job_id: {{JOB_ID}}
identity_id: {{EVENT_IDENTITY_ID}}
identity_name: {{EVENT_IDENTITY_NAME}}
entity_type: {{ENTITY_TYPE}}
entity_name: {{ENTITY_NAME}}
```
See [Default Template Content](#default-template-content) for all default messages.
**Lifecycle Management Events**
Each template you create is associated with a specific notification event (referred to as `usage` in the API). The following event types are available for Lifecycle Management workflows, organized by functional area:
Identity Management Events
| Event Type | API Usage Value | Description |
| --------------------------- | -------------------------------------------------- | ------------------------------------------- |
| Create Identity | `LIFECYCLE_MANAGEMENT_CREATE_IDENTITY` | Sent when a new identity/account is created |
| Create Identity Failed | `LIFECYCLE_MANAGEMENT_CREATE_IDENTITY_FAILED` | Sent when identity creation fails |
| Sync Identity | `LIFECYCLE_MANAGEMENT_SYNC_IDENTITY` | Sent when an identity is synchronized |
| Sync Identity Failed | `LIFECYCLE_MANAGEMENT_SYNC_IDENTITY_FAILED` | Sent when identity sync fails |
| Delete Identity | `LIFECYCLE_MANAGEMENT_DELETE_IDENTITY` | Sent when an identity is deleted |
| Delete Identity Failed | `LIFECYCLE_MANAGEMENT_DELETE_IDENTITY_FAILED` | Sent when identity deletion fails |
| Disable Identity | `LIFECYCLE_MANAGEMENT_DISABLE_IDENTITY` | Sent when an identity is disabled |
| Disable Identity Failed | `LIFECYCLE_MANAGEMENT_DISABLE_IDENTITY_FAILED` | Sent when identity disabling fails |
| Create Guest Account | `LIFECYCLE_MANAGEMENT_CREATE_GUEST_ACCOUNT` | Sent when a guest account is created |
| Create Guest Account Failed | `LIFECYCLE_MANAGEMENT_CREATE_GUEST_ACCOUNT_FAILED` | Sent when guest account creation fails |
Relationship Management Events
| Event Type | API Usage Value | Description |
| -------------------------- | ------------------------------------------------- | ------------------------------------- |
| Add Relationship | `LIFECYCLE_MANAGEMENT_ADD_RELATIONSHIP` | Sent when a relationship is added |
| Add Relationship Failed | `LIFECYCLE_MANAGEMENT_ADD_RELATIONSHIP_FAILED` | Sent when adding relationship fails |
| Remove Relationship | `LIFECYCLE_MANAGEMENT_REMOVE_RELATIONSHIP` | Sent when a relationship is removed |
| Remove Relationship Failed | `LIFECYCLE_MANAGEMENT_REMOVE_RELATIONSHIP_FAILED` | Sent when removing relationship fails |
Email Management Events
| Event Type | API Usage Value | Description |
| ----------------------- | ---------------------------------------------- | ------------------------------- |
| Create Email | `LIFECYCLE_MANAGEMENT_CREATE_EMAIL` | Sent when an email is created |
| Create Email Failed | `LIFECYCLE_MANAGEMENT_CREATE_EMAIL_FAILED` | Sent when email creation fails |
| Write Back Email | `LIFECYCLE_MANAGEMENT_WRITE_BACK_EMAIL` | Sent when email is synced back |
| Write Back Email Failed | `LIFECYCLE_MANAGEMENT_WRITE_BACK_EMAIL_FAILED` | Sent when email sync back fails |
Password Management Events
| Event Type | API Usage Value | Description |
| ---------------------- | --------------------------------------------- | ------------------------------- |
| Change Password | `LIFECYCLE_MANAGEMENT_CHANGE_PASSWORD` | Sent when a password is changed |
| Change Password Failed | `LIFECYCLE_MANAGEMENT_CHANGE_PASSWORD_FAILED` | Sent when password change fails |
| Reset Password | `LIFECYCLE_MANAGEMENT_RESET_PASSWORD` | Sent when a password is reset |
| Reset Password Failed | `LIFECYCLE_MANAGEMENT_RESET_PASSWORD_FAILED` | Sent when password reset fails |
Entitlement Management Events
| Event Type | API Usage Value | Description |
| ------------------------- | ------------------------------------------------ | ------------------------------------ |
| Create Entitlement | `LIFECYCLE_MANAGEMENT_CREATE_ENTITLEMENT` | Sent when an entitlement is created |
| Create Entitlement Failed | `LIFECYCLE_MANAGEMENT_CREATE_ENTITLEMENT_FAILED` | Sent when entitlement creation fails |
| Rename Entitlement | `LIFECYCLE_MANAGEMENT_RENAME_ENTITLEMENT` | Sent when an entitlement is renamed |
| Rename Entitlement Failed | `LIFECYCLE_MANAGEMENT_RENAME_ENTITLEMENT_FAILED` | Sent when entitlement renaming fails |
| Sync Entitlement | `LIFECYCLE_MANAGEMENT_SYNC_ENTITLEMENT` | Sent when an entitlement is synced |
| Sync Entitlement Failed | `LIFECYCLE_MANAGEMENT_SYNC_ENTITLEMENT_FAILED` | Sent when entitlement sync fails |
Actions and Workflows Events
| Event Type | API Usage Value | Description |
| ----------------------- | ---------------------------------------------- | -------------------------------------- |
| Custom Action | `LIFECYCLE_MANAGEMENT_CUSTOM_ACTION` | Sent when a custom action is performed |
| Custom Action Failed | `LIFECYCLE_MANAGEMENT_CUSTOM_ACTION_FAILED` | Sent when custom action fails |
| Action Succeed | `LIFECYCLE_MANAGEMENT_ACTION_SUCCEED` | Sent when an action succeeds |
| Action Failed | `LIFECYCLE_MANAGEMENT_ACTION_FAILED` | Sent when an action fails |
| Workflow Task Failed | `LIFECYCLE_MANAGEMENT_WORKFLOW_TASK_FAILED` | Sent when a workflow task fails |
| Extraction Event Failed | `LIFECYCLE_MANAGEMENT_EXTRACTION_EVENT_FAILED` | Sent when extraction processing fails |
Access Reviews Events
| Event Type | API Usage Value | Description |
| --------------------------- | -------------------------------------------------- | ---------------------------------- |
| Create Access Review Queued | `LIFECYCLE_MANAGEMENT_CREATE_ACCESS_REVIEW_QUEUED` | Sent when access review is queued |
| Create Access Review | `LIFECYCLE_MANAGEMENT_CREATE_ACCESS_REVIEW` | Sent when access review is created |
Safety Events
| Event Type | API Usage Value | Description |
| ----------------------------------------- | --------------------------------------------------------------- | -------------------------------------------------------------------- |
| Safety Limit Reached | `LIFECYCLE_MANAGEMENT_SAFETY_LIMIT_REACHED` | Sent when a hard safety limit is reached during processing |
| Predictive Safety Limit Exceeded | `LIFECYCLE_MANAGEMENT_PREDICTED_SAFETY_LIMIT_EXCEEDED` | Sent when a predictive safety limit blocks changes before processing |
| Workflow Predictive Safety Limit Exceeded | `LIFECYCLE_MANAGEMENT_WORKFLOW_PREDICTED_SAFETY_LIMIT_EXCEEDED` | Sent when a workflow-level predictive safety limit blocks changes |
Access Request Events
| Event Type | API Usage Value | Description |
| -------------------------------- | ------------------------------------------------------- | ---------------------------------------------- |
| Access Request Created | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_CREATED` | Sent when an Access Request is created |
| Access Request Action Run | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_ACTION_RUN` | Sent when Access Request actions start running |
| Access Request State Changed | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_STATE_CHANGED` | Sent when Access Request state changes |
| Access Request Approver Assigned | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_APPROVER_ASSIGNED` | Sent when new approvers are assigned |
| Access Request Succeed | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_SUCCEED` | Sent when Access Request succeeds |
| Access Request Failed | `LIFECYCLE_MANAGEMENT_ACCESS_REQUEST_FAILED` | Sent when Access Request fails |
### Default Template Content
Veza provides built-in email templates for all event types, organized by functional area below. These templates include standard placeholders and can be customized or replaced with your own templates.
Identity Management Templates
**CREATE\_IDENTITY**
* **Subject**: `New Hire Notification: {{ENTITY_TYPE}} account created`
* **Body**:
```html
Hello,
Here is the information for your new-hire: {{ENTITY_NAME}}
Account Type: {{ENTITY_TYPE}}
Login Name: {{LOGIN_NAME}}
```
**CREATE\_GUEST\_ACCOUNT**
* **Subject**: `New {{ENTITY_TYPE}} Guest Account Created: {{ENTITY_NAME}}`
* **Body**:
```html
Hello,
New {{ENTITY_TYPE}} Guest Account Created
Account Type: {{ENTITY_TYPE}}
Name: {{ENTITY_NAME}}
Login Name: {{LOGIN_NAME}}
Invite Sent: {{SENT_INVITE}}
```
**SYNC\_IDENTITY**
* **Subject**: `Sync Identity Notification: {{ENTITY_TYPE}} account synced`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} attributes have been synced
Account Type: {{ENTITY_TYPE}}
```
**DELETE\_IDENTITY**
* **Subject**: `Identity Deleted Notification: {{ENTITY_TYPE}} has an account deleted`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has been deleted
Account Type: {{ENTITY_TYPE}}
```
**DISABLE\_IDENTITY**
* **Subject**: `Identity Disabled Notification: {{ENTITY_TYPE}} has an account disabled`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has been disabled
Account Type: {{ENTITY_TYPE}}
```
Relationship Management Templates
**ADD\_RELATIONSHIP**
* **Subject**: `New Relationship Added Notification: {{ENTITY_TYPE}} has an account with new relationship to a {{RELATIONSHIP_ENTITY_TYPE}}`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has a new relationship to {{RELATIONSHIP_ENTITY_NAME}}
Account Type: {{ENTITY_TYPE}}
Relationship Type: {{RELATIONSHIP_ENTITY_TYPE}}
```
**REMOVE\_RELATIONSHIP**
* **Subject**: `Relationship Removed Notification: {{ENTITY_TYPE}} has an account whose relationship was remove from a {{RELATIONSHIP_ENTITY_TYPE}}`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has a relationship removed from {{RELATIONSHIP_ENTITY_NAME}}
Account Type: {{ENTITY_TYPE}}
Relationship Type: {{RELATIONSHIP_ENTITY_TYPE}}
```
Email Management Templates
**CREATE\_EMAIL**
* **Subject**: `New Email Notification: {{ENTITY_TYPE}} has an account with new email`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has a new email address
Account Type: {{ENTITY_TYPE}}
Email: {{EMAIL}}
```
**WRITE\_BACK\_EMAIL**
* **Subject**: `New Write Back Email Notification: {{ENTITY_TYPE}} has had an email sync to it`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has the newly created email synced back to it
Account Type: {{ENTITY_TYPE}}
Email: {{EMAIL}}
```
Password Management Templates
**CHANGE\_PASSWORD**
* **Subject**: `Password Change Notification: {{ENTITY_TYPE}} has an account with a new password`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has a password
Account Type: {{ENTITY_TYPE}}
Login Name: {{LOGIN_NAME}}
New Password: {{LOGIN_PASSWORD}}
```
**RESET\_PASSWORD**
* **Subject**: `Reset Password Notification: {{ENTITY_TYPE}} has had their password reset`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has had their password reset
Account Type: {{ENTITY_TYPE}}
Login Name: {{LOGIN_NAME}}
Temporary Password: {{LOGIN_PASSWORD}}
```
Entitlement Management Templates
**CREATE\_ENTITLEMENT**
* **Subject**: `Create entitlement notification: an entry of {{ENTITY_TYPE}} is created`
* **Body**:
```html
Hello,
An entry of {{ENTITY_TYPE}} is created: {{ENTITY_NAME}}
```
**RENAME\_ENTITLEMENT**
* **Subject**: `Rename entitlement notification: an entry of {{ENTITY_TYPE}} is renamed`
* **Body**:
```html
Hello,
An entry of {{ENTITY_TYPE}} is renamed with new name: {{ENTITY_NAME}}
```
**SYNC\_ENTITLEMENT**
* **Subject**: `Sync entitlement notification: an entry of {{ENTITY_TYPE}} is renamed`
* **Body**:
```html
Hello,
An entry of {{ENTITY_TYPE}} has been re-synced with the target system: {{ENTITY_NAME}}
```
Access Request Templates
**ACCESS\_REQUEST\_COMPLETE**
* **Subject**: `Access Request {{ACCESS_REQUEST_TYPE}} for {{ACCESS_REQUEST_ENTITY_NAME}} has {{SUCCEED_OR_FAILED}}`
* **Body**:
```html
Hello,
{{ACCESS_REQUEST_ENTITY_NAME}} has been {{ACCESS_REQUEST_TYPE}} with: {{ACCESS_REQUEST_TARGET_NAME}}.
User Type: {{ACCESS_REQUEST_ENTITY_TYPE}}
Target Type: {{ACCESS_REQUEST_TARGET_TYPE}}
```
**ACCESS\_REQUEST\_CREATED**
* **Subject**: `{{ACCESS_REQUEST_SOURCE_TYPE}} for {{ACCESS_REQUEST_ENTITY_NAME}} is {{ACCESS_REQUEST_STATE}}`
* **Body**:
```html
Hello,
The request is currently in {{ACCESS_REQUEST_STATE}} state.
For details: {{ACCESS_REQUEST_URL}}
```
**ACCESS\_REQUEST\_FAILED**
* **Subject**: `{{ACCESS_REQUEST_SOURCE_TYPE}} for {{ACCESS_REQUEST_ENTITY_NAME}} is failed`
* **Body**:
```html
Hello,
The request is failed, with an error message: {{EVENT_ERROR_MESSAGE}}
For details: {{ACCESS_REQUEST_URL}}
```
**ACCESS\_REQUEST\_STATE\_CHANGED**
* **Subject**: `{{ACCESS_REQUEST_SOURCE_TYPE}} for {{ACCESS_REQUEST_ENTITY_NAME}} is {{ACCESS_REQUEST_STATE}}`
* **Body**:
```html
Hello,
The request is currently in {{ACCESS_REQUEST_STATE}} state.
For details: {{ACCESS_REQUEST_URL}}
```
**ACCESS\_REQUEST\_APPROVER\_ASSIGNED**
* **Subject**: `{{ACCESS_REQUEST_SOURCE_TYPE}} for {{ACCESS_REQUEST_ENTITY_NAME}} in {{ACCESS_REQUEST_STATE}} as new assigned approvers`
* **Body**:
```html
Hello,
The request currently in {{ACCESS_REQUEST_STATE}} state has new been assigned new approvers.
For details: {{ACCESS_REQUEST_URL}}
```
Error and Failure Templates
**ACTION\_FAILED**
* **Subject**: `Action Failed: {{ACTION_NAME}} for identity {{IDENTITY_NAME}}`
* **Body**:
```html
Hello,
Action has failed.
Identity: {{IDENTITY_NAME}}
Action Name: {{ACTION_NAME}}
Action Type: {{ACTION_TYPE}}
Workflow Name: {{WORKFLOW_NAME}}
Error Message: {{EVENT_ERROR_MESSAGE}}
```
**WORKFLOW\_TASK\_FAILED**
* **Subject**: `Workflow Failed: {{WORKFLOW_NAME}} for identity {{IDENTITY_NAME}}`
* **Body**:
```html
Hello,
Workflow has failed.
Identity: {{IDENTITY_NAME}}
Workflow Name: {{WORKFLOW_NAME}}
Error Message: {{EVENT_ERROR_MESSAGE}}
```
**EXTRACTION\_EVENT\_FAILED**
* **Subject**: `Lifecycle Management extraction processing failed for {{DATASOURCE_ID}}`
* **Body**:
```html
Hello,
Extraction processing has failed.
Datasource: {{DATASOURCE_ID}}
Error Message: {{EVENT_ERROR_MESSAGE}}
```
Access Review Templates
**CREATE\_ACCESS\_REVIEW\_QUEUED**
* **Subject**: `Create Access Review Queued Notification: for identity {{IDENTITY_NAME}}`
* **Body**:
```html
Hello,
An access review has been queued for {{IDENTITY_NAME}}
```
**CREATE\_ACCESS\_REVIEW**
* **Subject**: `Create Access Review Notification: for identity {{IDENTITY_NAME}}`
* **Body**:
```html
Hello,
An access review has been created for {{IDENTITY_NAME}}
```
Safety and Custom Action Templates
**SAFETY\_LIMIT\_REACHED** (Hard Limit)
* **Subject**: `Safety Limit Reached Notification: Policy {{POLICY_NAME}} has stopped processing identity changes`
* **Body**:
```html
Hello,
The hard safety limit for policy {{POLICY_NAME}} has been reached. No further identity changes were processed.
```
**PREDICTED\_SAFETY\_LIMIT\_EXCEEDED** (Predictive Safety Limit)
* **Subject**: `Predictive Safety Limit Exceeded: Policy {{POLICY_NAME}} has blocked changes before processing`
* **Body**:
```html
Hello,
The predictive safety limit for policy {{POLICY_NAME}} has been exceeded. The predicted number of workflow runs exceeds the configured threshold. All changes have been blocked before processing. Review the blocked tasks and take action to proceed.
```
**WORKFLOW\_PREDICTED\_SAFETY\_LIMIT\_EXCEEDED** (Workflow-Level Predictive Safety Limit)
* **Subject**: `Workflow Predictive Safety Limit Exceeded: A workflow in policy {{POLICY_NAME}} has blocked changes before processing`
* **Body**:
```html
Hello,
A workflow-level predictive safety limit in policy {{POLICY_NAME}} has been exceeded. The predicted number of workflow runs for the workflow exceeds its configured threshold. Review the blocked tasks and take action to proceed.
```
**CUSTOM\_ACTION**
* **Subject**: `New Custom Action Notification: {{ENTITY_TYPE}} has performed a custom action`
* **Body**:
```html
Hello,
{{ENTITY_NAME}} has performed a custom action
Account Type: {{ENTITY_TYPE}}
Message: {{EVENT_ERROR_MESSAGE}}
```
### Image Attachments
From the Veza UI, you can add images directly through the "Add images" option. These will be automatically encoded and included in your template.
{% hint style="info" %}
**Image Requirements**: For API-based template management, small images under 64kb can be attached when configuring a template. The image must be base64-encoded and specified in the `attachments` field of the API request.
{% endhint %}
To use an attachment you have uploaded in a template, specify it by `attachment.name`, for example:
```html
User email: {{email}}
Department: {{department}}
Okta email: {{OktaUser.email}}
AD username: {{ActiveDirectoryUser.sAMAccountName}}
```
{% hint style="info" %}
**When to Use Typed Format**: Use `{{EntityType.attribute}}` format when your workflow processes multiple entity types and you need to reference a specific entity's attributes. For example, if your workflow processes both `OktaUser` and `ActiveDirectoryUser`, use `{{OktaUser.email}}` to specifically reference the Okta user's email address.
{% endhint %}
#### Predefined placeholders
The following static placeholders are available in all notification templates:
Identity and Entity Information
| **Placeholder** | **Description** |
| -------------------- | ------------------------------------------------------------ |
| `{{ENTITY_TYPE}}` | The type of entity (e.g., "ActiveDirectoryUser", "OktaUser") |
| `{{ENTITY_NAME}}` | The name of the entity/identity |
| `{{LOGIN_NAME}}` | The login/username for the account |
| `{{LOGIN_PASSWORD}}` | The password (for password-related notifications) |
| `{{EMAIL}}` | Email address associated with the identity |
Relationship Information
| **Placeholder** | **Description** |
| ------------------------------ | -------------------------- |
| `{{RELATIONSHIP_ENTITY_TYPE}}` | Type of the related entity |
| `{{RELATIONSHIP_ENTITY_NAME}}` | Name of the related entity |
Action and Job Information
| **Placeholder** | **Description** |
| ----------------------- | ----------------------------------------------------------------------------------------- |
| `{{ACTION_NAME}}` | Name of the action being performed; serves as the stable unique identifier for the action |
| `{{ACTION_TYPE}}` | Type of action |
| `{{ACTION_JOB_ID}}` | Unique identifier for the action job |
| `{{SUCCEED_OR_FAILED}}` | Status indicator ("succeeded" or "failed") |
| `{{SENT_INVITE}}` | Whether an invite was sent (for guest accounts) |
Access Request Information
| **Placeholder** | **Description** |
| -------------------------------- | -------------------------------------- |
| `{{ACCESS_REQUEST_TYPE}}` | Type of Access Request |
| `{{ACCESS_REQUEST_ENTITY_NAME}}` | Name of the entity requesting access |
| `{{ACCESS_REQUEST_ENTITY_TYPE}}` | Type of the requesting entity |
| `{{ACCESS_REQUEST_TARGET_TYPE}}` | Type of the target resource |
| `{{ACCESS_REQUEST_TARGET_NAME}}` | Name of the target resource |
| `{{ACCESS_REQUEST_URL}}` | URL to view the Access Request details |
| `{{ACCESS_REQUEST_STATE}}` | Current state of the Access Request |
| `{{ACCESS_REQUEST_SOURCE_TYPE}}` | Source type of the Access Request |
Event and Error Information
| **Placeholder** | **Description** |
| ------------------------- | --------------------------------------- |
| `{{EVENT_TYPE}}` | Type of lifecycle event |
| `{{JOB_ID}}` | Job identifier |
| `{{EVENT_ERROR_MESSAGE}}` | Error message for failed events |
| `{{EVENT_IDENTITY_ID}}` | Identity ID associated with the event |
| `{{EVENT_IDENTITY_NAME}}` | Identity name associated with the event |
Policy and Workflow Information
| **Placeholder** | **Description** |
| ------------------- | ----------------------------------------------------------------------------- |
| `{{POLICY_NAME}}` | Name of the lifecycle policy |
| `{{WORKFLOW_NAME}}` | Name of the workflow; serves as the stable unique identifier for the workflow |
| `{{DATASOURCE_ID}}` | Datasource identifier |
#### Troubleshooting placeholders
**Placeholder Not Being Replaced?**
If a placeholder appears in your notification email instead of being replaced with a value, check the following:
1. **Verify exact casing**: Placeholders are case-sensitive
* ✅ Correct: `{{ENTITY_TYPE}}`
* ❌ Wrong: `{{entity_type}}`, `{{EntityType}}`, `{{Entity_Type}}`
2. **Check placeholder format**: Ensure proper syntax with double curly braces
* ✅ Correct: `{{ENTITY_NAME}}`
* ❌ Wrong: `{ENTITY_NAME}`, `{{ENTITY_NAME}`, `ENTITY_NAME`
3. **Verify attribute exists**: For dynamic attributes, confirm the attribute is provided by your integration
* Use the typed format to specify the entity type: `{{OktaUser.email}}`
* Check your integration documentation for available attribute names and their casing
4. **Check event context**: Some placeholders are only available for specific events
* For example, `{{LOGIN_PASSWORD}}` is only available for password-related events
* `{{ACCESS_REQUEST_URL}}` is only available for Access Request events
**Best Practices:**
* **Start with predefined placeholders**: Use the documented static placeholders (uppercase) whenever possible
* **Test templates**: Send test notifications to verify placeholder replacement before deploying to production
* **Document custom attributes**: Keep a reference of the attribute names and casing used by your integrations
* **Use typed format for clarity**: When working with multiple entity types, use `{{EntityType.attribute}}` to avoid ambiguity
### Webhook Configuration Overview
Webhook notifications are triggered upon execution of actions during the LCM Policy workflow process. Webhooks inform stakeholders or integrate with external systems of events that are processed within the workflow. Webhook notifications can be optionally configured as their own discrete action in a workflow or as an option when another action is executed.
For example, a webhook is sent to the company's learning management system to initiate online onboarding training once each new hire's Active Directory account is provisioned, following a successful Sync Identity operation.
#### Create a Webhook
To create and manage a webhook, perform the following:
1. Go to **Policies** and select a policy.
2. Click **Edit Policy**.
3. Click **Policy Settings**.
4. Scroll down to **Notifications** and click **Add Notification**.
5. Choose the **Webhook** notification type.
6. Choose an **event to trigger** notifications:
* Create Identity
* Sync Identity
* Add Relationship
* Remove Relationship
* Create Email
* Change Password
* Delete Identity
* Disable Identity
* Manage Relationships
* Write Back Email
* Access Request Complete
* Custom Action
* Action Failed
* Workflow Task Failed
* Extraction Event Failed
* Create Entitlement
* Create Guest Account
* Rename Entitlement
* Create Access Review
* Reset Password
* Create Access Review Queued
* Safety Limit Reached
* Predictive Safety Limit Exceeded
* Workflow Predictive Safety Limit Exceeded
* Sync Entitlement
7. Choose the status to trigger notifications (when an event is **Successful**, or **On Failure**).
8. Select an **Existing Veza Action**.
A Veza Action is an integration with functionality for sending data to external systems, enabling downstream processes around Veza alerts, and access to reviewer actions. Use a Veza Action to configure generic webhooks or enable email notifications.
See Veza Actions [Webhooks](/4yItIzMvkpAvMVFAamTf/administration/administration/notifications/destinations/webhooks.md) on how to create and deploy a webhook.
9. To customize the Webhook setting, perform the following:
* In the **Webhook URL** field, enter the endpoint configured to receive the webhook payload.
* In the **Webhook Auth Header** field, enter the Auth Header if the webhook listener requires authentication.
When configured, webhook requests include an Authorization header containing the credentials specified in the **Webhook Auth Header** field. This allows the receiving endpoint to authenticate the request using Bearer tokens, API keys, or other authentication schemes.
10. Click **Save**.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.veza.com/4yItIzMvkpAvMVFAamTf/features/lifecycle-management/policies-workflows/lifecycle-management-notification-templates.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.