Overview
To connect CyberArk, you will need to provide the following information:- Tenant URL
- OAuth Client Application ID
- Client ID
- Client Secret
Prerequisites
- You have Administrator permissions in your company’s CyberArk instance
Step 1: Log in to Your CyberArk Admin Portal
Log in to your CyberArk portal via your organization's tenant URL.
Switch to the Admin Portal by clicking the grid icon next to 'Identity User Portal'.
Select 'Admin Portal'.
Step 2: Create a SCIM Client Role
Navigate to Core Services → Roles.
Click 'Add Role' in the top left corner.
Name your role 'SCIM Client' and click 'Save'.
Under 'Administrative Rights', click 'Add'.
Search for and select 'User Management' (not 'Read Only User Management').
Click 'Save'.
Step 3: Create a Custom OAuth Client
Navigate to Apps & Widgets → Web Apps.
Click 'Add Web Apps' in the top right corner.
On the Custom tab, click 'Add' next to 'OAuth2 Client'.
Click 'Yes' to add the application, then 'Close'.
On the Settings page, set an Application ID.
scim_oauth_client. This becomes your OAuth Client Application ID for the linking flow.On the General Usage page, check 'Confidential' and 'Must be OAuth Client' under Client ID Type.
On the Tokens page, configure:
- Token Type:
JwtRS256 - Auth methods:
Client Creds - Access token lifetime:
5 hours
On the Scope page, click 'Add' and create a new scope:
- Name:
SCIMAPIScope - Allowed REST APIs: Add
scim
On the Permissions page, add the SCIM Client role from Step 2.
Click 'Save'.
Step 4: Create a CyberArk Service User
Navigate to Core Services → Users.
Click 'Add User' in the top right corner.
Complete the following fields:
- Login name: This becomes part of your Client ID (e.g.,
CLIENT_ID_PREFIX@merge) - Display name: Any name you choose
- Password: This becomes your Client Secret
Check 'Is OAuth confidential client' under the Status section.
Click 'Save'.
Go back to Core Services → Roles and open the SCIM Client role.
Under 'Members', click 'Add' and add your new service user.
Click 'Save'.
Enter Credentials into Doozy
Go to the Doozy web app.
Choose CyberArk as the HRIS you want to connect.
Tenant URL: Enter the URL used to log into your CyberArk portal.
Application ID: Enter the Application ID from Step 3.
Client ID: Enter the full login name from Step 4 (e.g., `CLIENT_ID_PREFIX@merge`).
Client Secret: Enter the password from Step 4.
Click Submit.