Set up the email template you want to send via the webhook. The email should be sent from your email server and contain a link to the sign-in screen.
Verify the webhook signature before processing to ensure the request is authentic.
Respond with a 2xx quickly after queuing work; use retries and make processing idempotent (e.g., de-duplicate by event ID).
Filter the webhook payload to determine whether the user was created manually or via API. The source field is admin or api. Treat these differently if needed.