> For the complete documentation index, see [llms.txt](https://dfend.gitbook.io/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dfend.gitbook.io/documentation/how-it-works.md).

# How It Works

* Create [**Identities**](/documentation/developer-api/types/identity.md) that map to users of your application or service.
* Set up a [**webhook**](/documentation/developer-api/webhook.md) to receive [**Events**](/documentation/developer-api/types/event.md) about suspicious behavior or Identity state changes.
* Send digital identity [**Signals**](/documentation/developer-api/types/signal.md) into our system.

{% hint style="info" %}
Identities can be created on the fly if you include identifying data in a Signal. Learn more about this on the [Signal ](/documentation/developer-api/https-api/signal.md)section of the HTTPS API documentation.
{% endhint %}
