Postman supports SCIM (System for Cross-domain Identity Management) provisioning through OneLogin with the Postman OneLogin app, enabling you to automate user provisioning and de-provisioning.
You must be an administrator in OneLogin, and a Postman Admin or Super Admin to enable SCIM. It’s recommended that you enable SCIM with a service account assigned the Super Admin role.
With SCIM enabled, users won’t have the option to leave your teams on their own, and won’t be able to change their account email or password. Only Admins, Super Admins, and Organization Managers have permission to remove members. Only administrators in OneLogin have permission to use SCIM to change user account emails if they’re associated with a verified domain.
Postman is available as an app in OneLogin, allowing you to enable user provisioning along with SSO. Before enabling SCIM, you must configure SSO with OneLogin.
Enable SCIM in OneLogin
To set up provisioning with OneLogin, do the following:
-
In OneLogin, go to the Postman app and click Configuration.
-
In the API Connection section, paste the generated SCIM API key in the SCIM Bearer Token text box, then click Enable.
-
In Postman, click Save.
Configure the OneLogin SCIM integration
Postman supports the provisioning features detailed in the SCIM provisioning overview. To configure provisioning, go to the Postman app in OneLogin and click Provisioning, then Enable provisioning.
Select features to enable them, or clear them to turn them off.
You can also define what happens when users are deleted in OneLogin, their Postman app access is removed, or their accounts are suspended. You can choose to Suspend these users’ Postman accounts or Do Nothing. If you choose to Suspend, the affected accounts no longer appear in your Postman organization or team dashboard. Regardless of your choice, users who are deleted, suspended, or have their app access removed will no longer be able to sign in to their Postman account.
Click Save to save your changes.