Enable domain capture in Postman

View as Markdown

Domain verification is available with Postman Team and Enterprise plans. Domain capture is available only on Postman Enterprise plans with the Advanced Security Administration add-on. You need to reach out to Postman support to enable verification. For more information, see the pricing page.

As an Admin, you can enable domain capture after you complete its prerequisites, including adding and verifying a domain. Domain capture enables you to move all the existing users associated with your verified domain or subdomain to your Enterprise teams. Thereafter, Postman users who sign up for a new account with the verified domain are automatically added to your teams.

Your team must have only SAML-based SSO authentication methods enabled to turn on domain capture. Alternative authentication methods, such as Postman or Google sign in, must be turned off.

Domain management lets you control which Postman accounts are associated with your organization based on email domain. You can verify domains, view domain-matching users, and notify them to join your team. Depending on your plan, you can also enable domain capture and copy user or team data.

Plan availability

The following table shows which domain management features are available on each Postman plan:

FeaturePlans
Base domain managementEnterprise Trial, Team, Enterprise, Enterprise Plus ASA
Domain capture, user copy, team copyEnterprise Plus ASA (requires additional approval)

Base domain management

All plans with domain management access can do the following from Setting icon Settings > Organization settings > Domain Management:

  • View the list of domains added to your team.
  • Verify a domain.
  • Manage an existing verified domain.

View domain users

When you manage a verified domain, you can view a list of Postman accounts that match your domain. To protect privacy, the following rules apply to the visibility of domain-matching users:

  • Users who are already members of your team appear with their full email address visible.
  • Users who aren’t yet members appear with their email address masked.

Notify domain users

You can notify domain-matching users to prompt them to join your organization:

  1. Select one or more users from the domain user list.
  2. Click Notify (per row) or Notify Users (bulk) to send a notification.

The notified user receives a prompt they can follow to join your team.

Unmask users using CSV upload

If you want to identify specific masked users before notifying them, you can upload a CSV:

  1. Prepare a single-column CSV file containing the email addresses you want to look up with an “Email” header.
  2. Click Upload CSV on the Domain Users page.
  3. Postman matches the uploaded emails against the domain user list and unmasks any that are found.

Additional features

If you have Enterprise Plus ASA, you can request approval from Postman support to unlock the following additional capabilities. Once approved, Postman can enable them for your organization.

Domain capture

Domain capture automatically directs Postman accounts to your team based on their email domain. You can enable it at two levels:

  • New signups only — All new Postman accounts created with your domain automatically join your organization.
  • New signups and existing users — All accounts with your domain, including existing ones, can only access Postman through your organization.

To enable domain capture, go to your domain’s management page and click Enable in the Domain Capture section.

Domain teams

The Domain Teams view lists external Postman teams where at least one Admin has a domain-matching email address. From this view you can do the following:

  • Review team names, total member counts, and the number of domain-matching members.
  • Copy a team’s users and data into your organization.

Enable domain capture

To enable domain capture for a verified domain, do the following:

  1. Go to Setting icon Settings > Organization settings > Domain Management.

  2. Click Manage on your verified domain.

  3. In the Domain Capture section, click Enable.

  4. In the Enable Domain Capture dialog, choose the capture level:

    • New signups only — All new accounts created with this domain will automatically join your team.
    • New signups and existing users — Postman users in other teams with your domain will have their sessions revoked and be directed to your team.
  5. If selecting New signups and existing users, acknowledge the warning and confirm the following checkboxes:

    • I understand the impact on affected users — Their sessions will be revoked and API keys deactivated.
    • Notify captured users via email — An email will be sent to affected users notifying them of the change.
  6. Click Enable or Next (if you don’t have enough seats).

    Not enough seats

    After clicking Next, Postman checks whether your team has enough available seats to provision all domain users. If there aren’t enough seats, a Not Enough Seats dialog appears with the following options:

    • Add more seats — Purchase additional seats, then re-check availability.
    • Contact support — Request Auto-Flex, which automatically scales your seat count.
    • Continue anyway — Enable domain capture for up to the number of currently available seats. The remaining users won’t be provisioned.
    • Re-check availability — Refresh the seat count after making changes.

When there are enough seats, domain capture progresses on screen with the following messages:

  1. Enabling domain capture for sign-ups and logins.
  2. Provisioning new domain users to your team.

Once complete, a confirmation banner appears on the domain detail page.

Manage the data of domain-captured users

You can view and copy the data of domain-captured users into the organization in the View and Copy Domain Matching Accounts section of the domain detail page. Click View Users to open the Domain Users page.

Users can also copy their own personal data from external accounts into the team by going to Setting icon Settings > Account settings and clicking Copy my data.

To copy the domain-captured teams, click View Teams in the View and Copy Eligible Teams section.

View and copy domain users

The Domain Users page lists Postman accounts that match the organization’s verified domain, regardless of whether those accounts exist inside or outside the organization. For each user, the page indicates whether they’re already a provisioned member of the organization.

You can select individual users or use Select all, then click Copy Users to copy their personal workspace data from outside the organization into the organization. Users who have a personal workspace or are part of a team of one will have their data consolidated under the organization.

Copying user data does not require domain capture to be enabled. As long as the domain is verified, you can view and copy domain-matching user data at any time.

Copy personal data

In addition to Admin-initiated copying, individual users can copy their own personal data into their organization using the Copy my data option on their account settings page (Setting icon Settings > Account settings > Copy my data).

This option is for users who are already a member of an organization team but also have personal workspaces or are part of a team of one outside the organization. It brings that external personal data into the organization the user belongs to.

For the Copy my data button to appear and be active, both of the following conditions must be met:

  • The destination team’s domain must be verified.
  • The user’s email address must be verified.

When a user clicks Copy my data, it invokes the same copy workflow as described in View and copy domain users.

Mutual exclusivity

Copying personal data can only happen once per user, and you as an Admin or the user can initiate it:

  • If the user copies their own data, you as an Admin will no longer see that user on the Domain Users page.
  • If you as an Admin copy the data on behalf of the user, the user won’t have the Copy my data option.

View and copy eligible teams

The Domain Teams page lists external Postman teams where at least one user with a domain-matching email is an Admin, but who aren’t already part of the current organization. It also shows the status of imported teams in the organization.

Each team entry shows the following for the external teams:

  • Team Name — The name of the team with members matching your domain.
  • Members — Total number of members in the team
  • Domain Users — Number of members whose email matches the verified domain

You can copy a team only if all of its members are domain-matching users. If a team contains members who don’t have the verified domain, the Select checkbox is unavailable for that team.

When you copy an eligible team, Postman completes the following steps:

  • Creates a new team within the organization containing the copied team’s users and workspaces.
  • Copies all workspace data from the external team into the new team.
  • Adds the copied users as members of the new team.

The copied team operates as its own team within the organization, separate from other teams.

Contact support to manage accounts

For help turning off domain capture, claiming accounts, or merging external teams into your organization, contact Postman support.

Domain capture support and FAQs

For more information on the effects of enabling domain capture, see Domain capture FAQs.