This feature is available on Postman Enterprise plans with the Advanced Security Administration add-on. For more information, see the pricing page.
You can integrate your Postman Vault with external vaults, such as Azure Key Vault. This enables you to link vault secrets with secrets stored in an external vault. You can then reference vault secrets in your Postman team, and retrieve the value of secrets stored in external vaults when you send HTTP requests.
You can create Postman Vault integrations from the Postman desktop app.
Before you integrate your Postman Vault with external vaults, make sure you understand how to add vault secrets to your Postman Vault, and reference vault secrets in Postman.
Postman Vault integrations enable you to link vault secrets with secrets that are stored in an external vault. You can then reference vault secrets in your Postman team, and retrieve the value of external vault secrets using end-to-end encryption when you send HTTP requests. Postman supports Postman Vault integrations with 1Password, AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault.
Postman retrieves authentication credentials that enable you to authenticate with your external vault, such as a user access token. The type of authentication credentials that Postman retrieves can vary depending on the external vault you’re authenticating with. Postman must authenticate with your external vault to retrieve secrets from it when you send HTTP requests.
Authentication credentials and retrieved secrets aren’t stored in your local instance of Postman or the Postman cloud. Postman removes authentication credentials from your working memory and local storage when you close Postman or your authentication credentials expire.
You’ll need to reauthenticate with external vaults each time you open Postman or when your authentication credentials expire in Postman. You’ll need to create the integration again if you sign out and back in to Postman.
You can only integrate your Postman Vault with one organization in an external vault provider at a time. If you want to integrate with a different organization in your external vault provider, you must disconnect the integration, then create a new integration that authenticates with a different organization. See the following details about creating and managing integrations with external vault providers:
External partners assigned the Partner role can’t access Postman Vault integrations.
Postman supports the following Postman Vault integrations:
You can manage and update your Postman Vault integrations. Set the expiration duration for cached secrets, change linked secrets, reauthenticate with your external vaults, and disconnect your integrations.
To learn how to troubleshoot vault secrets, see Troubleshoot vault secrets.