# Make NERM API call using SailPoint ISC WOrkflow HTTPRequest Action

**URL:** <https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280>\
**Category:** SHF Discussion and Questions\
**Tags:** api, nerm, workflows, sailpoint-identity-security\
**Created:** [April 3, 2025, 10:25am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280 "2025-04-03T10:25:04Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 3, 2025, 10:25am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/1 "2025-04-03T10:25:04Z")

</div>

Hi,  
Can Anyone guide me on “How to make NERM API call from SailPoint ISC Workflow” ?

I am not sure which authentication method to select and how the call will get executed, or if it is possible to do NERM API call from SailPoint ISC..!!!

Any Insights are appreciated.

Thank you,  
Vaibhav

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [April 3, 2025, 11:57am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/2 "2025-04-03T11:57:29Z")

</div>

The NERM API uses a bearer token, which you can get from the Admin section in NERM:

> **[API Settings - SailPoint Non-Employee Risk Management Admin Help](https://documentation.sailpoint.com/ne-admin/help/setup/api.html)**
>
> SailPoint Non-Employee Risk Management Admin Help

Then you need to setup the http action in your ISC workflow to add this authentication in the header of the call. What you want to do depends on the NERM endpoint you want to call:

> **[NERM v1 API | SailPoint Developer Community](https://developer.sailpoint.com/docs/api/nerm/v1)**
>
> These are the Non-employee Risk Management APIs for SailPoint. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.

---

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 3, 2025, 12:02pm UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/3 "2025-04-03T12:02:21Z")

</div>

@sauvee , I could make API calls in Postman, but I do not know how to set up Authentication method and other settings when I am tryin to do the same in ISC workflow httprequest action…!!

---

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 3, 2025, 1:10pm UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/4 "2025-04-03T13:10:34Z")

</div>

![image](https://global.discourse-cdn.com/sailpoint/original/3X/0/b/0b90a3619e9b0080b8f15fa7f875de65796aa80a.png)  
This is the part I am not understanding, what values I should put in Authentication Type, and subsequent steps.

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [April 3, 2025, 2:49pm UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/5 "2025-04-03T14:49:30Z")

</div>

I would select NO authentication type and just add in the request header the value you entered in postman as well. So that would be a request header “Authorization” with value “Bearer \<api token from NERM”.

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/0/3/03781715afc5a627c29ff811ee69cac8b14cf38f.png)

---

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 4, 2025, 4:42am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/6 "2025-04-04T04:42:50Z")

</div>

I actually do not see “No Authentication” Option in the workflow…

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/2/c/2ca77b6f853fbf28d256ac8f3039bd64809b6fca.png)

---

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 4, 2025, 4:48am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/7 "2025-04-04T04:48:53Z")

</div>

I just saw that Authentication Type is not Mandatory field…  
So there is no need to select any authentication.  
I just need to pass the token in the header with the URL…!!!

---

<div class="post-metadata">

**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\
**Post date:** [April 4, 2025, 5:07am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/8 "2025-04-04T05:07:58Z")

</div>

It worked..  
Thank you @sauvee 🙂

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [April 4, 2025, 6:57am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/9 "2025-04-04T06:57:26Z")

</div>

Good to read, I was just about to reply to that mentioning that Authentication is not required.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 3, 2025, 6:58am UTC](https://developer.sailpoint.com/discuss/t/make-nerm-api-call-using-sailpoint-isc-workflow-httprequest-action/107280/10 "2025-06-03T06:58:15Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
