/authn/{account}/password

Changes a user’s password.

/authn/{account}/api_key

Rotates a role's API key.

/authn/{account}/login

Gets the API key of a user given the username and password via HTTP Basic Authentication.

/authn/{account}/{login}/authenticate

Gets a short-lived access token, which is required in the header of most subsequent API requests.

/authn-azure/{service_id}/{account}/{login}/authenticate

Gets a short-lived access token for applications running in Azure.

/authn-gcp/{account}/authenticate

Gets a short-lived access token for applications running in Google Cloud Platform.

/authn-gcp/{account}/status

Details whether an authentication service has been configured properly

/authn-iam/{service_id}/{account}/{login}/authenticate

Get a short-lived access token for applications running in AWS.

/authn-jwt/{service_id}/{account}/authenticate

Gets a short-lived access token for applications using JSON Web Token (JWT) to access the Conjur API.

/authn-jwt/{service_id}/{account}/{id}/authenticate

Gets a short-lived access token for applications using JSON Web Token (JWT) to access the Conjur API. Covers the case of use of optional URL parameter "ID"

/authn-k8s/{service_id}/inject_client_cert

For applications running in Kubernetes; sends Conjur a certificate signing request (CSR) and requests a client certificate injected into the application's Kubernetes pod.

/authn-k8s/{service_id}/{account}/{login}/authenticate

Gets a short-lived access token for applications running in Kubernetes.

/authn-ldap/{service_id}/{account}/login

Gets the Conjur API key of a user given the LDAP username and password via HTTP Basic Authentication.

/authn-ldap/{service_id}/{account}/{login}/authenticate

Gets a short-lived access token for users and hosts using their LDAP identity to access the Conjur API.

/authn-oidc/{service_id}/{account}/authenticate

Gets a short-lived access token for applications using OpenID Connect (OIDC) to access the Conjur API.

/ca/{account}/{service_id}/sign

Gets a signed certificate from the configured Certificate Authority service.

/health

Health info about conjur

/host_factories/hosts

Creates a Host using the Host Factory.

/host_factory_tokens

Creates one or more host identity tokens.

/host_factory_tokens/{token}

Revokes a token, immediately disabling it.

/info

Basic information about the Conjur Enterprise server

/policies/{account}/policy/{identifier}

Modifies an existing Conjur policy.

/policies/{account}/policy/{identifier}

Adds data to the existing Conjur policy.

/policies/{account}/policy/{identifier}

Loads or replaces a Conjur policy document.

/public_keys/{account}/{kind}/{identifier}

Shows all public keys for a resource.

/remote_health/{remote}

Health info about a given Conjur Enterprise server

/resources

Lists resources within an organization account.

/resources/{account}

Lists resources within an organization account.

/resources/{account}/{kind}

Lists resources of the same kind within an organization account.

/resources/{account}/{kind}/{identifier}

Shows a description of a single resource.

/secrets/{account}/{kind}/{identifier}

Fetches the value of a secret from the specified Secret.

/secrets

Fetch multiple secrets

/secrets/{account}/{kind}/{identifier}

Creates a secret value within the specified variable.

/roles/{account}/{kind}/{identifier}

Deletes an existing role membership

/roles/{account}/{kind}/{identifier}

Get role information

/roles/{account}/{kind}/{identifier}

Update or modify an existing role membership

/whoami

Provides information about the client making an API request.

/{authenticator}/{account}

Enables or disables authenticator defined without service_id.

/{authenticator}/{service_id}/{account}

Enables or disables authenticator service instances.

/{authenticator}/{service_id}/{account}/status

Details whether an authentication service has been configured properly