# Postman web interface **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** postman, sailpoint-identity-security\ **Created:** [July 3, 2023, 8:07pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772 "2023-07-03T20:07:25Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 3, 2023, 8:07pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/1 "2023-07-03T20:07:26Z")
Potentially this is a just me issue but has anyone else experienced issues connecting to a production instance of IdentityNow via the Postman web interface? I have set up the collections via desktop and can connect to both my production and non-production instances with no issues on desktop. When I go to [web.postman.co](http://web.postman.co) I can use the exact same connections, scripts, etc. for non-production, but for production I get that the client credentials are bad every time. I have generated new PATs and that doesn’t change the error. I’m not sure if I’m missing a security configuration that is blocking the connection in production, any help would be appreciated. ---
**Author:** ![ethompson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ethompson/32/17298_2.png) [@ethompson](https://developer.sailpoint.com/discuss/u/ethompson)\ **Post date:** [July 5, 2023, 12:59pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/2 "2023-07-05T12:59:08Z")
Depending on how your credentials are saved, Postman has different ways to sync variable across instances. If that is not the issue, is there an error message you are seeing from IDN? > **[Using variables | Postman Learning Center](https://learning.postman.com/docs/sending-requests/variables/#sharing-and-persisting-data)** > > Using variables: documentation for Postman, the collaboration platform for API development. Create better APIs—faster. ---
**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\ **Post date:** [July 5, 2023, 1:05pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/3 "2023-07-05T13:05:13Z")
Do you have a whitelist of IP addresses set up in your production env? ---
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 5, 2023, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/4 "2023-07-05T13:49:02Z")
The same CIDR blocks are set in both environments, but I agree that was a good place to look. ---
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 5, 2023, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/5 "2023-07-05T13:49:30Z")
Where would I look to find an error message like that? ---
**Author:** ![ethompson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ethompson/32/17298_2.png) [@ethompson](https://developer.sailpoint.com/discuss/u/ethompson)\ **Post date:** [July 5, 2023, 1:59pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/6 "2023-07-05T13:59:49Z")
Are the same client id and secret being used in both instances - Desktop and Web? Can you share the response you are getting? ---
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 5, 2023, 2:29pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/7 "2023-07-05T14:29:30Z")
Same credentials in both desktop and web. This is the error I see on web. ![image](https://global.discourse-cdn.com/sailpoint/original/2X/a/a8c010770e330dc979213396b490d2351d1c885a.png) ---
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 6, 2023, 1:43pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/8 "2023-07-06T13:43:12Z")
As a test I opened up a very wide range of IPs, seeing as [postman.co](http://postman.co) uses a wide range for connections. I was able to connect to production with this open. I’ll have to see if I can find a list of [postman.co](http://postman.co) outbound connecting IPs to try and whitelist them. Thanks again for this suggestion! ---
**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\ **Post date:** [July 6, 2023, 1:55pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/9 "2023-07-06T13:55:09Z")
Good to know my reply helped you going in the right direction 🙂 About IP addresses, I would rather disable the IP white list in the tenant (and enable it back once you are done) whenever you are using the Postman web interface as it might be hard to keep a track of the IP addresses the Postman server will be using ---
**Author:** ![nathanieljjohnson](https://avatars.discourse-cdn.com/v4/letter/n/df705f/32.png) [@nathanieljjohnson](https://developer.sailpoint.com/discuss/u/nathanieljjohnson)\ **Post date:** [July 6, 2023, 2:06pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/10 "2023-07-06T14:06:39Z")
Agreed. The list is based on the AWS regional lists which makes opening to all of those a bit of a non-starter with my security team. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [September 4, 2023, 2:07pm UTC](https://developer.sailpoint.com/discuss/t/postman-web-interface/13772/11 "2023-09-04T14:07:03Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.