https://developer.authorize.net/api/reference/features/webhooks.html#Event_Types_and_Payloads
https://mandrill.zendesk.com/hc/en-us/articles/205583257-How-to-Authenticate-Webhook-Requests
https://shipstation.docs.apiary.io/#reference/webhooks/subscribe-to-webhook/subscribe-to-webhook
Just a couple examples. planning on just setting up some random urls that would otherwise be unknown. But since authentication methods vary it seems like anonymous would need to be used. Then perhaps there are some good request policies to put in place to verify the payloads are valid.
This is a bit off the use case of consolidating the services and authentications for use in infor user authenticated client apps.