CyberArk OpenID Connect Provider

CyberArk Identity is an enterprise identity security platform that provides single sign-on, multi-factor authentication, and lifecycle management, supporting OAuth 2.0 and OpenID Connect as an identity provider.

Features

Grant Types

Extensions

Endpoints

Token Endpoint Authentication Methods

none
client_secret_basic
client_secret_post
client_secret_jwt
private_key_jwt
tls_client_auth

Prompts

Features

Financial-grade API (FAPI)

If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.

Looking for (C)IAM features like MFA, SSO, user management, and compliance? Check out the (C)IAM Identity Providers benchmark.

Frequently Asked Questions

Does CyberArk support the Authorization Code grant type?

CyberArk supports Authorization Code grant type. Read more

Does CyberArk support the Refresh Token grant type?

CyberArk supports Refresh Token grant type. Read more

Does CyberArk support the Client Credentials grant type?

CyberArk supports Client Credentials grant type. Read more

Does CyberArk support the Implicit grant type?

CyberArk supports Implicit grant type. Read more

Does CyberArk support the Resource Owner Password Credentials grant type?

CyberArk supports Resource Owner Password Credentials grant type. Read more

Does CyberArk support the PKCE extension?

CyberArk supports PKCE extension. Read more

Does CyberArk support the Authorization Endpoint endpoint?

CyberArk supports Authorization Endpoint endpoint. Read more

Does CyberArk support the Token Endpoint endpoint?

CyberArk supports Token Endpoint endpoint. Read more

Does CyberArk support the UserInfo Endpoint endpoint?

CyberArk supports UserInfo Endpoint endpoint. Read more

Does CyberArk support the Token Revocation endpoint?

CyberArk supports Token Revocation endpoint. Read more

Does CyberArk support the Token Introspection endpoint?

CyberArk supports Token Introspection endpoint. Read more

Does CyberArk support the OpenID Connect Discovery Endpoint endpoint?

CyberArk supports OpenID Connect Discovery Endpoint endpoint. Read more

Does CyberArk support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?

CyberArk supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Read more

Does CyberArk support the client_secret_basic token endpoint authentication method?

CyberArk supports client_secret_basic token endpoint authentication method. Read more

Does CyberArk support the client_secret_post token endpoint authentication method?

CyberArk supports client_secret_post token endpoint authentication method. Read more

Does CyberArk support the none prompt?

CyberArk supports none prompt. Read more

Does CyberArk support the login prompt?

CyberArk supports login prompt. Read more

Does CyberArk support the consent prompt?

CyberArk supports consent prompt. Read more

Does CyberArk support the RP-initiated Logout feature?

CyberArk supports RP-initiated Logout feature. Read more

Does CyberArk support the Refresh Token Rotation feature?

CyberArk supports Refresh Token Rotation feature. Read more

Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.