# Configure a Webhook in Bitbucket Enterprise

{% hint style="info" %}
As of 9 September 2025, app username and passwords have been deprecated as a type of authentication method. However, as of 9 June 2026, all existing app passwords will be disabled. Users are required to create API tokens and migrate this function prior to the deadline to avoid disruptions. <https://support.atlassian.com/bitbucket-cloud/docs/api-tokens/>
{% endhint %}

## A. Create a Webhook API Token in ARM

1. Log in to ARM.
2. Navigate to **Admin Section > API Token**.
3. Click **Create API Token**.

<figure><img src="https://1912836914-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9vAxMuDrkUkB4OXlH9CL%2Fuploads%2FjSn1STY9LV0acaFAmw2y%2Fimage.png?alt=media&#x26;token=a1e5f2f2-d06c-46ae-a0b5-90666992a535" alt="Create API Token screen in ARM"><figcaption></figcaption></figure>

4. Enter a **Token Name**.
5. Select **Type** as **webhook**.
6. (Optional) Add a **Description**.
7. Click **Create Option**.

<figure><img src="https://1912836914-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9vAxMuDrkUkB4OXlH9CL%2Fuploads%2FZdgMxGATNZncmunk2dMJ%2Fimage.png?alt=media&#x26;token=76f0e788-ae6f-416b-91d6-0943c38adb85" alt="Webhook token details input screen in ARM"><figcaption></figcaption></figure>

8. Your webhook API token is now created.

***

## B. Create a Webhook with Authentication in Bitbucket

1. Log in to your **Bitbucket** account and open the target repository.
2. Go to **Settings** and select [**Webhooks**](https://knowledgebase.autorabit.com/product-guides/codescan/codescan-integration/webhooks).

<figure><img src="https://1912836914-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9vAxMuDrkUkB4OXlH9CL%2Fuploads%2FOvthtP9JkwS5IJNOEavY%2Fimage.png?alt=media&#x26;token=ef59169f-70d8-4898-94b2-0fba105c50c9" alt="Bitbucket Webhooks configuration section"><figcaption></figcaption></figure>

3. In the webhook configuration form, use the following URL formats:
   * For SCM push events:

     ```
     https://login.autorabit.com/api/webhook/v2/<orgname>/enterprise/trigger-scm-push-request
     ```
   * For ALM commit syncs:

     ```
     https://login.autorabit.com/api/webhook/v2/<orgname>/enterprise/sync-alm-commits
     ```
4. Enter the webhook details and click **Save**.

***

## Smart Commits

Configure commit message patterns that associate commits with ALM stories.\
Example:

<figure><img src="https://1912836914-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F9vAxMuDrkUkB4OXlH9CL%2Fuploads%2FNozmlMYzeMmxplhZ2Xyq%2Fimage.png?alt=media&#x26;token=6f340d03-a507-4a3e-ab11-1a77683486e0" alt="Smart commit example and configuration options" width="563"><figcaption></figcaption></figure>

To configure a webhook:

* Enable the **auto update on webhook** checkbox to display the webhook URL.
* For setup in other repository types, refer to the [Webhook Guide](file://product-guides/arm/arm-features/webhooks).
* To integrate with external smart commit systems, see the [Version Control Repositories Summary](file://product-guides/arm/arm-features/version-control/introduction-to-version-control/version-control-repositories-summary).
