Integrating SailPoint with Postman
Postman is an API platform used by development and quality teams to design, build, test, and collaborate on APIs. Postman organizes its users into teams and workspaces and exposes a public REST API that allows external systems to read user and team membership information for identity and access management purposes. This document provides instructions to configure a new direct connection to a Postman source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Postman connector supports the following:
Account Management
- Aggregate Users
- Entitlement Management (via Account Attributes)
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
- Sign in to Postman with an account that has Team Admin (or higher) access on the Postman team you wish to govern.
- Open your account avatar and navigate to Settings > API keys, or go directly to the API Keys settings page.
- Select Generate API Key.
- Provide a descriptive name for the key (for example,
SailPoint Integration). - Copy the generated API key value and store it securely. Postman displays the key only once at creation time.
For more information about integrating Postman into your development toolchain, refer to the Postman API documentation.
Required Permissions
- The Postman API key inherits the role of the user who created it. To allow the connector to aggregate all team users, the key must be created by a user with one of the following Postman team roles:
- Team Admin
- Super Admin
- The connector authenticates each request by sending the API key in the
X-API-KeyHTTP header. No additional OAuth scopes are required because Postman uses static API key authentication. - For more information about Postman API key authentication, refer to the Postman API authentication documentation.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.