Generation of Authorization Code

  1. Navigate to https://<host>:<port>/oauth/authorize?response_type=code&client_id=< client_id >&scope=< scope >&redirect_uri=https://<host>:<port>/SailpointSapEPArchive/.

  2. Login with Service Account having required permission and Scope and click on Authorize.

  3. Copy the code which is obtained from the above step as follows and save it:

    https://<host>:<port>/SailpointSapEPArchive?code=54aa06c8c43c11eb84a20000006b0896

  4. Navigate to postman and perform a post request using the following:

    Request URL: https://<host>:<port>/oauth/token

    1. In the Authorization tab for a request, select OAuth 2.0 from the Type dropdown list. Specify if you want to pass the auth details in the request URL or headers.

      By default Postman will append the access token to Bearer in the Authorization header for your request, but if your server implementation requires a different prefix, you can specify it in the Header Prefix field.

    2. To request an access token, fill out the fields in the Configure New Token section, and select Get New Access Token. You can save both the token and the details to generate a token with your request or collection.

      Once you have a token value generated and added, it will appear in the request Headers.

    3. Enter the details for your client application, and any auth details from the service provider. This allows you to replicate your application auth flow inside Postman in order to test authenticated requests.

    4. Postman will prompt you to supply specific details depending on the OAuth 2.0 grant type. Enter the details, and press Save.

    5. Press Send to send the request. The response should show athenticated:true

    6. Select the Console icon. The Request Header should say Authorization.

      Authorization passes the client’s ID and client’s Secret.

    Use the Body type as x-www-form-urlencoded and pass the following attributes:

    Attributes Value

    client_id

    Obtain the value from Register a Client Application.

    grant_type

    authorization_code

    code

    Obtain the value from step 3 above.

    redirect_uri

    Obtain the value from Register a Client Application.

    response_type

    token

    scope

    Obtain the value from Register a Client Application.

  5. Save the Access and Refresh Token.