# Centrify Authentication API

**Canonical:** https://apis.io/apis/centrify/centrify-authentication-api/  
**Provider:** Centrify — https://apis.io/providers/centrify/  
**Base URL:** https://developer.delinea.com/reference  
**Documentation:** https://developer.delinea.com/docs

Centrify Authentication API is one of 26 APIs that [Centrify](https://apis.io/providers/centrify/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

Authenticate to cloud service, MFA

## Operations (56)

| Method | Path | Summary |
|---|---|---|
| POST | `/Acl/CheckRowRight` | Check row ACLs |
| POST | `/Acl/GetAce` | Gets a users access rights |
| POST | `/Acl/GetCollectionAces` | Get a collection of access rights |
| POST | `/Acl/GetDirAces` | Retrieves a list of who has what rights for the directory |
| POST | `/Acl/GetEffectiveDirRights` | Gets a list of directory rights |
| POST | `/Acl/GetEffectiveFileRights` | Gets a list of file rights |
| POST | `/Acl/GetEffectiveRowRights` | Gets a list of row rights |
| POST | `/Acl/GetFileAces` | Gets ACLs on a file |
| POST | `/Acl/GetRowAces` | Gets the access rights for a row |
| POST | `/AuthProfile/DeleteProfile` | Deletes an authentication profile |
| POST | `/AuthProfile/GetProfile` | Gets an authentication profile |
| POST | `/AuthProfile/GetProfileList` | Gets a list of Authentication profiles |
| POST | `/AuthProfile/SaveProfile` | Saves an authentication profile |
| POST | `/CDirectoryService/RefreshToken` | Refresh a user's cached identity |
| POST | `/Collection/IsMember` | Gets the members with access to the set |
| POST | `/OAuth2/Authorize` | Authenticates a request |
| POST | `/OAuth2/Confirm` | Confirm |
| POST | `/OAuth2/EndSession` | https://openid.net/specs/openid-connect-session-1_0.html#RPLogout |
| POST | `/OAuth2/Introspect` | Introspect |
| POST | `/OAuth2/Keys` | Keys |
| POST | `/OAuth2/Revoke` | Revoke |
| POST | `/OAuth2/Token` | Gets a token based on grant type |
| POST | `/OAuth2/UserInfo` | This returns the contents of the bearer token used |
| POST | `/OAuth2Man/CreateClientToken` | Creates a client token |
| POST | `/Security/AdvanceAuthentication` | Attempt to advance the state of an authentication session |
| POST | `/Security/AdvanceForgotUsername` | Advances a forgot username session (similar to MFA advance authentication) |
| POST | `/Security/AnswerOOBChallenge` | MultiFactor Auth support: answer out of band challenge |
| POST | `/Security/ChallengeUser` | Determines if user needs step-up authentication |
| POST | `/Security/CleanupAuthentication` | Terminate an incomplete session started with StartAuthentication or… |
| POST | `/Security/GetOneTimePassword` | Fetches a one-time passcode for the specified use |
| POST | `/Security/GetRiskAnalysisLevels` | Gets a list of risk levels |
| POST | `/Security/Login` | Deprecated -- User login |
| POST | `/Security/Logout` | Logout current user |
| POST | `/Security/OnDemandChallenge` | Allows OAuth2 clients to perform on-demand step-up authentication challenges |
| POST | `/Security/RefreshToken` | Refresh current user's cached identity |
| POST | `/Security/ResumeFromExtIdpAuth` | Continues user authentication |
| POST | `/Security/StartAuthentication` | Starts a user authentication session |
| POST | `/Security/StartChallenge` | Starts a step-up authentication challenge session |
| POST | `/Security/StartForgotUsername` | Starts a forgot username session that looks similar to an MFA authentication… |
| POST | `/Security/StartSocialAuthentication` | Start social authentication |
| POST | `/Security/SubmitOathOtpCode` | Submit OATH OTP code for the specify user |
| POST | `/Security/TaskCheck` | Checks to see if user has execute rights on the task |
| POST | `/Security/TaskChecks` | Checks to see if user has execute rights on a list of tasks |
| POST | `/Security/TwilioPhoneChallengeCompleted` | Looks for the multi auth customer response |
| POST | `/Security/TwilioPhoneChallengeNotAnswered` | Looks for the multi auth customer response |
| POST | `/Security/WhoAmI` | Confirms user authentication state |
| POST | `/ServerAgent/VerifyPassword` | Verify username and password |
| POST | `/ServerAgent/VerifyPasswordV2` | Verify password |
| POST | `/ServerAgent/VerifyUserCanLogin` | Verify user can login |
| POST | `/U2f/AnswerRegistrationChallenge` | Answer registration challenge |
| POST | `/U2f/DeleteU2fDevice` | Deletes the U2f device |
| POST | `/U2f/DeleteU2fDevices` | Delete a list of U2f devices |
| POST | `/U2f/Facets` | Get the trusted facet list for the tenant |
| POST | `/U2f/GetRegistrationChallenge` | Get registration challenge |
| POST | `/U2f/GetU2fDevices` | Gets a list of U2f devices |
| POST | `/U2f/GetU2fDevicesForUser` | Gets a list of U2f devices for the current user |

## Machine-readable artifacts (7)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/openapi/centrify-authentication-api-openapi.yml
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-core-get-ad-topology-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-user-mgmt-get-user-info-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-server-manage-get-discovery-profiles-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-server-manage-get-my-workspace-accounts-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-uprest-get-resultant-apps-for-user-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/centrify/refs/heads/main/json-schema/centrify-saas-manage-get-application-schema.json

## Other Centrify APIs (12)

- [Centrify Identity Services API](https://apis.io/apis/centrify/centrify-identity-services-api/)
- [Centrify APIs API](https://apis.io/apis/centrify/centrify-apis-api/)
- [Centrify Application Management API](https://apis.io/apis/centrify/centrify-application-management-api/)
- [Centrify Cloud User Management API](https://apis.io/apis/centrify/centrify-cloud-user-management-api/)
- [Centrify Core Services API](https://apis.io/apis/centrify/centrify-core-services-api/)
- [Centrify Dataset API](https://apis.io/apis/centrify/centrify-dataset-api/)
- [Centrify Device Management API](https://apis.io/apis/centrify/centrify-device-management-api/)
- [Centrify Directory Services API](https://apis.io/apis/centrify/centrify-directory-services-api/)
- [Centrify File API](https://apis.io/apis/centrify/centrify-file-api/)
- [Centrify Get Discovery Profiles API](https://apis.io/apis/centrify/centrify-getdiscoveryprofiles-api/)
- [Centrify Get Discovery Status API](https://apis.io/apis/centrify/centrify-getdiscoverystatus-api/)
- [Centrify Get Role Apps API](https://apis.io/apis/centrify/centrify-getroleapps-api/)

## Tags

Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/centrify/centrify-authentication-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/centrify/.