***
title: Integrate Postman Vault with Azure Key Vault
updated: 2025-09-03T00:00:00.000Z
max-toc-depth: 2
----------------
**[Postman Vault integrations are available with Postman Enterprise plans with the Advanced Security Administration add-on.](https://www.postman.com/pricing/)**
[Azure Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/general/overview) enables you to store sensitive data in a vault that's external from your [Postman Vault](/docs/sending-requests/postman-vault/postman-vault-secrets/). Once you create the integration with Azure Key Vault, you can link vault secrets with sensitive data stored in Azure Key Vault, and retrieve them when you send HTTP requests.
You can create Postman Vault integrations from the [Postman desktop app](/docs/getting-started/installation/installation-and-updates/).
Learn more about [Postman Vault integrations](/docs/sending-requests/postman-vault/postman-vault-integrations/).
{/* vale postman-style-guide.Headings = NO */}
{/* "Azure Key Vault" is written in title case */}
## About the Azure Key Vault integration
{/* vale postman-style-guide.Headings = YES */}
When setting up an integration with Azure Key Vault, you need to [authenticate with your Microsoft Azure account](#integrate-with-azure-key-vault). Then you can [link vault secrets with Azure Key Vault](#link-vault-secrets-with-azure-key-vault) using the secret identifier for each secret.
You can follow the steps to [create a secret](https://learn.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal#add-a-secret-to-key-vault) from Azure Key Vault. You can also follow the steps to [retrieve a secret](https://learn.microsoft.com/en-us/azure/key-vault/secrets/quick-create-portal#retrieve-a-secret-from-key-vault), enabling you to view the secret's identifier.
Postman recommends using an [Azure Key Vault firewall](https://learn.microsoft.com/en-us/azure/key-vault/general/network-security#key-vault-firewall-enabled-ipv4-addresses-and-ranges---static-ips) to allowlist your static IP addresses. Otherwise, you may not be able to retrieve secrets stored in your Azure Key Vault.
{/* vale postman-style-guide.Headings = NO */}
{/* "Azure Key Vault" is written in title case */}
## Integrate with Azure Key Vault
{/* vale postman-style-guide.Headings = YES */}
When you create the integration, authorize Postman to access and retrieve secrets from Azure Key Vault.
Postman uses the [OAuth 2.0 authorization code flow](https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow) with Proof Key for Code Exchange (PKCE) to authenticate with Azure, which retrieves an access token. The [access token](https://learn.microsoft.com/en-us/entra/identity-platform/access-tokens) is generated using the `https://vault.azure.net/user_impersonation` scope, and it's valid in Postman for 1 day.
You'll need to [reauthenticate with Azure](/docs/sending-requests/postman-vault/manage-postman-vault-integrations/#reauthenticate-with-an-external-vault) each time you open Postman, or when your access token expires in Postman.
To integrate with Azure Key Vault and authenticate with your Azure account, do the following:
1. Open your Postman Vault.
2. If you haven't created an integration with an external vault, click 
**Set up external vault** in the upper right of your Postman Vault. Otherwise, click **Use from existing vault**.
3. Select **Azure Key Vault**. You're prompted to authorize Postman to access your Microsoft Azure account.
Optionally, you can click 
**Settings** in the upper right of your Postman Vault. From the **Settings** tab, click **Connect** next to **Azure Key Vault**.
{/* */}
Your computer must be able to access your Microsoft Azure instance.
{/* vale postman-style-guide.Headings = NO */}
{/* "Azure Key Vault" is written in title case */}
## Link vault secrets with Azure Key Vault
{/* vale postman-style-guide.Headings = YES */}
Link a vault secret's value with a secret stored in Azure Key Vault. This enables you to retrieve a secret stored in Azure Key Vault directly from Postman. Once you link a vault secret's value, [reference the vault secret](/docs/sending-requests/postman-vault/manage-vault-secrets/#use-vault-secrets) to retrieve its value from Azure Key Vault when you send it with an HTTP request.
Secrets retrieved from Azure Key Vault aren't stored in your local instance of Postman or the Postman cloud. Learn more about [Postman Vault integrations](/docs/sending-requests/postman-vault/postman-vault-integrations/#about-postman-vault-integrations).
{/* */}
Vault secrets are deleted from your Postman Vault after signing out of Postman. Your vault secrets can't be recovered with your vault key. When you sign in to Postman and open your Postman Vault, you can [create the integration](#integrate-with-azure-key-vault) and link a vault secret's value.
Before you link a vault secret, make sure you have at least the [Key Vault Secrets User](https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli) role in Azure. This enables you to retrieve secrets stored in Azure Key Vault from your Postman team.
To link a vault secret's value with Azure Key Vault, do the following:
1. In Postman, enter a name for the vault secret, hover over the **Value** cell, then click **Link Vault**.
If you've already integrated with an external vault, you can link a secret from a different external vault provider. Click 
**Add new vault**, then select an external vault.
2. Enter the **Secret Identifier** on the **Link secret** window. The secret identifier is the URI of the secret in Azure Key Vault. Learn more about [identifiers in Azure Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates).
```txt
https://.vault.azure.net/secrets//
```
The latest version of the secret will be used unless you include the version ID.
3. Click **Use**.
To view details about a secret you've linked from Azure Key Vault, click **Configure vault** next to a secret.
You can also [use scripts to access vault secrets](/docs/tests-and-scripts/write-scripts/postman-sandbox-reference/pm-vault/) linked with Azure Key Vault. Postman doesn't support using scripts to set the value of vault secrets linked with external vaults. Make sure you enable scripts to access your vault secrets; otherwise, you'll receive an error in the Postman Console.
## Next steps
After integrating Postman Vault with Azure Key Vault, you can reference vault secrets and manage your integrations:
* To learn how to reference vault secrets in Postman, see [Use vault secrets](/docs/sending-requests/postman-vault/manage-vault-secrets/#use-vault-secrets).
* To learn how to troubleshoot vault secrets, see [Troubleshoot vault secrets](/docs/sending-requests/postman-vault/troubleshoot-vault-secrets/).
* To learn how to manage your integrations, see [Manage Postman Vault integrations](/docs/sending-requests/postman-vault/manage-postman-vault-integrations/).