Public keys overview

This topic explains how to locate the public key for all tokens issued on your tenant and the public key for your tenant.

Locate the public key for all tokens

The public key for all tokens issued on your tenant is your tenant-signing certificate.

  1. Navigate in the Admin Portal to Settings > Authentication > Signing Certificates.

  2. Locate the default certificate, which is the one indicated with a check mark in the Default column.

  3. Right-click that certificate and select Download. A .cer file is downloaded to your machine, and you can inspect it using a text editor.

Locate the public key for a tenant

You can find the public key for your tenant by entering your tenant's URL in a browser, and concatenating it with /oauth/keys. For example:

https://mycompany.my.idaptive.app/oauth/keys

https://mycompany.id.cyberark.cloud/oauth/keys

The browser then displays the information for the tenant's public key, similar to the following example:

{
	"keys": [
		{
			"use": "sig",
			"n": "9bMWuCiA8xzJFafweawe...",
			"kid": "0SOIVUOWIFHASD2341234...",
			"kty": "RSA",
			"alg": "RS256",
			"e": "AQAB"
		}
	]
}