We tested GLPI 11 webhooks on our support instance: a URL with a port is silently rejected, requests arrive without Content-Type and depend on cron. Field-by-field setup, HMAC signature, retries and a checklist.