> For the complete documentation index, see [llms.txt](https://docs.jianny.net/work/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.jianny.net/work/azure/app-registration-auths/postman.md).

# Postman

Download Postman from the [official website](https://www.postman.com/downloads/), register an account and log in

Find "Open in Postman" on this [Microsoft website](https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth-ropc)

The usual auth method that works for us is ROPC (Fig 1)

1. Replace Organization from address bar to tenant ID
2. Input client\_id or the application id
3. Input client\_secret
4. Input account username and password
5. Hit Send
6. Copy the retrieved token
7. Go to [jwt.io website](https://jwt.io/) and paste the token to test (Optional)

{% hint style="info" %}
If the API scope is set to empty, then it will automatically grab whatever was granted to the app itself (Listing scope(s) explicitly will help to limit the scope of the application) 
{% endhint %}

<figure><img src="/files/ZBCzvuRMNteu49eRJ2wy" alt=""><figcaption><p>Fig 1</p></figcaption></figure>