How to Configure SAML JIT for Postman

Item Details
Pre-check
  • Prior configuration in Postman is required.
  • Please refer to the manual provided by Postman for the latest configuration steps.
Name ID Email address
Custom attribute Note: For how to configure custom attributes, see here
SP Configuration Configured by the administrator
Request SP to configure
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Other:
Enabled for all users (SAML authentication and password authentication can be used together)
Notes
  • Please refer to Postman's SSO configuration manual here.
  • With SAML JIT, users can be created using their email address. Users created via SAML JIT are assigned the Developer role.

Table of Contents:

TrustLogin Admin Page Settings

Postman Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png
  2. Search on the "Register Company App" screen and select "Postman (SAML)".
    2025-12-23_12-44-34.png
  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring Postman.
Do not click the "Register" button yet — open Postman in a separate window.

Postman Settings

  1. Log in as an administrator and click the team name icon.
    2025-12-23_12-56-34.png
  2. Open "Authentication" and click "Add authentication method".

    2025-12-23_12-57-48.png

  3. For "Authentication type", select "SAML2.0". Set any name you like for "Authentication name" (e.g., TrustLogin) and save by clicking "Continue".
    2025-12-23_12-58-49.png
  4. Select "Use SP metadata file". Check "Include encryption certificate" and "Sign SAML requests and include signing certificate" under "Download options", then download the metadata from "Download Metadata File".
    Upload the TrustLogin metadata to "Upload Metadata File" under "2. Identity provider details".
    2025-12-23_13-01-14.png
  5. After uploading the metadata, once the information is reflected in each setting field, click "Generate relay state".
    2025-12-23_13-02-50.png
  6. Use the copy button to note down the "Relay state", confirm that "Automatically add new users using this authentication method to my team." is checked, and save the settings by clicking "Save Authentication".
    2025-12-25_13-101-31.png
  7. Return to the "Authentication" screen and turn on the Status toggle for the "Authentication name" you configured.
    Note: At this stage, make sure to also keep "Postman Password" turned on. Turning it off will disable password login. If you want to turn it off, we recommend doing so only after setup is complete and you have confirmed that SAML authentication works successfully.
    Screenshot 2025-12-23 150351.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.

    Redirect URL after successful SP authentication The "Relay state" you noted down from Postman
    Metadata Upload the metadata downloaded from Postman

    2025-12-25_13-26-57.png

  2. Click the "Save" button to save your settings.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Postman (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "Postman (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Login Method

①First Login via SAML JIT

On first login via SAML JIT, after the terms of service screen, set a username, select a role, and click "Continue".

From the second login onward, you will be able to log in via SSO.
2025-12-25_16-26-37.png

②SP-Initiated Login Method

  1. Open the Postman login URL and click "Sign In with SSO".2025-12-25_16-36-56.png
  2. Enter your Team domain and click "Continue". 2025-12-25_16-37-12.png
  3. Click the "Authentication name" you configured.
     2025-12-25_16-37-23.png
  4. If you are not logged in to TrustLogin, you will be redirected to TrustLogin. Once you log in to TrustLogin, SSO login will be complete.

③Desktop App Login Method

  1. Open the Postman desktop app and click "Single Sign On (SSO)".

    2025-12-24_10-57-20.png
  2. Enter your Team domain and click "Continue".
     2025-12-24_10-57-36.png
  3. Click the "Authentication name" you configured.
     2025-12-24_10-57-55.png
  4. If you are not logged in to TrustLogin, you will be redirected to TrustLogin. Once you log in to TrustLogin, SSO login will be complete.

How to Configure SAML JIT for Postman

Item Details
Pre-check
  • Prior configuration in Postman is required.
  • Please refer to the manual provided by Postman for the latest configuration steps.
Name ID Email address
Custom attribute Note: For how to configure custom attributes, see here
SP Configuration Configured by the administrator
Request SP to configure
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Other:
Enabled for all users (SAML authentication and password authentication can be used together)
Notes
  • Please refer to Postman's SSO configuration manual here.
  • With SAML JIT, users can be created using their email address. Users created via SAML JIT are assigned the Developer role.

Table of Contents:

TrustLogin Admin Page Settings

Postman Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png
  2. Search on the "Register Company App" screen and select "Postman (SAML)".
    2025-12-23_12-44-34.png
  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring Postman.
Do not click the "Register" button yet — open Postman in a separate window.

Postman Settings

  1. Log in as an administrator and click the team name icon.
    2025-12-23_12-56-34.png
  2. Open "Authentication" and click "Add authentication method".

    2025-12-23_12-57-48.png

  3. For "Authentication type", select "SAML2.0". Set any name you like for "Authentication name" (e.g., TrustLogin) and save by clicking "Continue".
    2025-12-23_12-58-49.png
  4. Select "Use SP metadata file". Check "Include encryption certificate" and "Sign SAML requests and include signing certificate" under "Download options", then download the metadata from "Download Metadata File".
    Upload the TrustLogin metadata to "Upload Metadata File" under "2. Identity provider details".
    2025-12-23_13-01-14.png
  5. After uploading the metadata, once the information is reflected in each setting field, click "Generate relay state".
    2025-12-23_13-02-50.png
  6. Use the copy button to note down the "Relay state", confirm that "Automatically add new users using this authentication method to my team." is checked, and save the settings by clicking "Save Authentication".
    2025-12-25_13-101-31.png
  7. Return to the "Authentication" screen and turn on the Status toggle for the "Authentication name" you configured.
    Note: At this stage, make sure to also keep "Postman Password" turned on. Turning it off will disable password login. If you want to turn it off, we recommend doing so only after setup is complete and you have confirmed that SAML authentication works successfully.
    Screenshot 2025-12-23 150351.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.

    Redirect URL after successful SP authentication The "Relay state" you noted down from Postman
    Metadata Upload the metadata downloaded from Postman

    2025-12-25_13-26-57.png

  2. Click the "Save" button to save your settings.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Postman (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "Postman (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Login Method

①First Login via SAML JIT

On first login via SAML JIT, after the terms of service screen, set a username, select a role, and click "Continue".

From the second login onward, you will be able to log in via SSO.
2025-12-25_16-26-37.png

②SP-Initiated Login Method

  1. Open the Postman login URL and click "Sign In with SSO".2025-12-25_16-36-56.png
  2. Enter your Team domain and click "Continue". 2025-12-25_16-37-12.png
  3. Click the "Authentication name" you configured.
     2025-12-25_16-37-23.png
  4. If you are not logged in to TrustLogin, you will be redirected to TrustLogin. Once you log in to TrustLogin, SSO login will be complete.

③Desktop App Login Method

  1. Open the Postman desktop app and click "Single Sign On (SSO)".

    2025-12-24_10-57-20.png
  2. Enter your Team domain and click "Continue".
     2025-12-24_10-57-36.png
  3. Click the "Authentication name" you configured.
     2025-12-24_10-57-55.png
  4. If you are not logged in to TrustLogin, you will be redirected to TrustLogin. Once you log in to TrustLogin, SSO login will be complete.