Centrify · Authentication Profile

Centrify Authentication

Authentication

Centrify secures its APIs with oauth2, http, and apiKey across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the clientCredentials, authorizationCode, and password flow(s).

CompanyIdentityPrivileged Access ManagementAccess ManagementAuthenticationSingle Sign-OnMulti-Factor AuthenticationSecurityZero TrustIAM
Methods: oauth2, http, apiKey Schemes: 4 OAuth flows: clientCredentials, authorizationCode, password API key in: header, cookie

Security Schemes

OAuth2 oauth2
· flows: clientCredentials, authorizationCode, password
BearerToken http
scheme: bearer
SessionCookie apiKey
· in: cookie ()
SAML other

Source

Authentication Profile

centrify-authentication.yml Raw ↑ 
generated: '2026-07-18'
method: searched
source: https://developer.delinea.com/docs/getting-access-to-the-api
docs: https://developer.delinea.com/docs/using-apis
note: >-
  Derived from the Centrify Identity Services / Cloud Suite (PAS) developer
  documentation (served at developer.delinea.com after the Delinea rebrand).
  No machine-readable OpenAPI is captured in this repo, so this profile is
  documented from the published auth guides rather than derived from a spec.
summary:
  types: [oauth2, http, apiKey]
  api_key_in: [header, cookie]
  oauth2_flows: [clientCredentials, authorizationCode, password]
schemes:
- name: OAuth2
  type: oauth2
  flows:
  - flow: clientCredentials
  - flow: authorizationCode
  - flow: password
  description: >-
    OAuth2 confidential-client flows against the tenant OAuth2 authorization
    server; used for programmatic / service access to the Centrify REST API.
- name: BearerToken
  type: http
  scheme: bearer
  description: >-
    API access tokens (bearer) issued after authentication, sent on subsequent
    REST calls.
- name: SessionCookie
  type: apiKey
  in: cookie
  description: >-
    Authentication cookie established by the interactive/adaptive
    authentication flow (MFA-aware) for portal-scoped calls.
- name: SAML
  type: other
  description: >-
    SAML assertions accepted for federated/SSO scenarios into the Identity
    Platform.