Integrate Postman Vault with external vaults
This feature is available on Postman Enterprise plans with the Advanced Security Administration add-on. For more information, see the pricing page.
You can integrate your Postman Local Vault with external vaults, such as Azure Key Vault. This enables you to link vault secrets with secrets stored in an external vault, without syncing them to the Postman cloud. You can then reference vault secrets in your Postman team, and retrieve the value of secrets stored in external vaults when you send HTTP requests. Postman supports Postman Vault integrations with 1Password, AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault.
Postman Vault integrations are only supported with the Postman desktop app.
About Postman Vault integrations
With Postman Vault integrations, you can integrate your Postman Local Vault with one organization in an external vault provider at a time. See the following details about creating and managing integrations with external vault providers:
- 1Password, AWS Secrets Manager, and Azure Key Vault - You create and manage the integration with your Postman Vault. This means you and your team members can integrate with different organizations in 1Password, AWS Secrets Manager, and Azure Key Vault.
- HashiCorp Vault - Only a Postman Admin or Super Admin can create and manage the integration with your Postman Vault. This means that you and your team members must integrate with the same organization in HashiCorp.
To integrate with a different organization in your external vault provider, you must disconnect the integration, then create a new integration that authenticates with a different organization.
Postman retrieves authentication credentials using end-to-end encryption to authenticate with your external vault, such as a user access token. The type of authentication credentials that Postman retrieves can vary depending on the external vault you’re authenticating with. Postman must authenticate with your external vault to retrieve secrets when you send HTTP requests.
Authentication credentials and retrieved secrets aren’t stored in your local instance of Postman or the Postman cloud. Postman removes authentication credentials from your working memory and local storage when you close Postman or your authentication credentials expire.
External partners assigned the Partner role can’t access Postman Vault integrations.
Supported integrations
Postman supports the following Postman Vault integrations:
Manage integrations
You can manage and update your Postman Vault integrations. Set the expiration duration for cached secrets, change linked secrets, reauthenticate with your external vaults, and disconnect your integrations.
Troubleshoot vault secrets
To learn how to troubleshoot vault secrets, see Troubleshoot vault secrets.