openapi: 3.1.0 info: title: CyberArk Identity REST Authentication Org API version: 2026-05 description: 'CyberArk Identity (formerly Idaptive) REST API. Provides authentication, OAuth/OIDC token issuance, user and organization management, extended user attributes/schema, and SCIM v2 user/group provisioning against a CyberArk Identity tenant. Best-effort spec derived from publicly indexed CyberArk Identity developer documentation (api-docs.cyberark.com, docs.cyberark.com, and third-party API directory listings). The authoritative reference is https://api-docs.cyberark.com/identity-docs-api/docs/identity-apis. The host should be set to your CyberArk Identity tenant URL — e.g. https://aab1234.id.cyberark.cloud. ' contact: name: CyberArk Developer Hub url: https://api-docs.cyberark.com/identity-docs-api/docs/identity-apis license: name: Proprietary servers: - url: https://{tenant}.id.cyberark.cloud description: CyberArk Identity tenant variables: tenant: default: aab1234 description: Your CyberArk Identity tenant prefix. security: - BearerAuth: [] tags: - name: Org paths: /Org/Create: post: tags: - Org summary: Create an organization requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/Org' responses: '200': description: Organization created content: application/json: schema: $ref: '#/components/schemas/UserMgmtResult' /Org/ListAll: post: tags: - Org summary: List all organizations responses: '200': description: Organizations content: application/json: schema: $ref: '#/components/schemas/UserMgmtResult' components: schemas: UserMgmtResult: type: object properties: success: type: boolean Result: type: object additionalProperties: true Message: type: string nullable: true Exception: type: string nullable: true ErrorCode: type: string nullable: true ErrorID: type: string nullable: true Org: type: object properties: Name: type: string Description: type: string securitySchemes: BearerAuth: type: http scheme: bearer bearerFormat: JWT description: OAuth 2.0 / OIDC bearer token issued by /OAuth2/Token/{appId}. BasicAuth: type: http scheme: basic description: HTTP Basic with OAuth client credentials, used only for /OAuth2/Token/{appId}. externalDocs: description: CyberArk Identity API reference url: https://api-docs.cyberark.com/identity-docs-api/docs/identity-apis