Setting Up IAM Postman Collection

The following page describes how to set up your Postman to use the IAM Postman Collection. This Postman Collection can be used by customers using TLS or mTLS connections, though the set up is slightly different depending on which connection method you're using.

Prerequisites

You must have the following before setting up the IAM Postman Collection:

• Administrator access to Thredd Portal
• Postman
• The Thredd IAM Postman Collection downloaded from here
• The Thredd IAM Postman Environment file
• (For mTLS access only) OpenSSL installed on your machine

Setting up TLS Postman Collection

To set up Postman for TLS, see the following steps.

Step One: Create Application and Auth Client in Thredd Portal

You can create an application and auth client in Thredd Portal. Successfully creating these produces a Client Secret and Client ID that you can enter into the Postman Collection.

Details on how to create an Application and associated Auth Client can be found in the Applications page of the Thredd Portal guide.

Step Two: Import Postman Collection into Postman

You can download the Postman Collection from the API Explorer page. Ensure you download the Thredd IAM API Collection.

When you have successfully downloaded the collection, open Postman and import the collection.

1. Click File from the menu, then select Import.
2. Drag the downloaded collection into the window.

The collection displays and opens in Postman.

Step Three: Import Postman Environment File

The Postman Environment file includes the variables for the Postman Collection to work, and is where you enter your Client Secret and Client ID into the collection. You can download the Postman Environment from the API Explorer page.

To import the environment file:

1. Click File from the menu, then select Import.
2. Drag the downloaded file into the window.

The environment variables are added to Postman.

Step Four: Enter Client Secret and Client ID into Postman

To add the Client Secret and Client ID to the Collection:

1. Use the dropdown in the top-right of Postman to select the UAT Thredd environment.
2. Click the Variables button in the top-right corner of Postman. All variables for the environment display.
3. Enter your Client Secret from Thredd Portal into the client_secret field.
4. Enter your Client ID from Thredd Portal into the client_id field.

Step Five: Generate Authentication Token

Before you can use the API endpoints, you must create an authentication token. To create the token:

1. Open the Authorisation folder in the Collection and select the Get Access Token endpoint.
2. Click Send.

An authentication token is created and automatically added to your variables. This token lasts for 60 minutes. When the token expires you will need to generate a new token to continue using the APIs.

Setting up mTLS Postman Collection

The set up for using mTLS with our Postman Collection differs slightly from the TLS setup. Before starting, ensure you have installed OpenSSL on your machine as this is required to generate a Transport certificate.

To set up Postman for mTLS, see the following steps.

Step One: Create Application and Auth Client in Thredd Portal

You can create an application and auth client in Thredd Portal. Successfully creating these produces a Client Secret and Client ID that you can enter into the Postman Collection.

Details on how to create an Application and associated Auth Client can be found in the Applications page of the Thredd Portal guide.

Step Two: Create Transport Certificate in Thredd Portal

To use mTLS for the Postman Collection you must first create a Transport Certificate, which is done in Thredd Portal.

To create a Transport Certificate in Thredd Portal:

1. Open the System Admin menu and select Applications.
2. Click Actions for the application you want to create a certificate for and click Review Application.
3. Open the Certificates tab and click New Certificate. The New Certificate window opens.
4. Select Transport in the Certificate Type field and click Next.
5. Copy the generated CSR.
6. Open a command prompt on your device.
7. Paste the CSR into the command prompt. Two files are created - a CSR file and a KEY file.
8. Return to Thredd Portal and click Next.
9. Click on the window and navigate to and select the CSR file created in the previous step.
10. Click Save. The window closes and the Certificates tab updates with the new Transport certificate.
11. Click Actions on the certificate and click Download Certificate.

Step Three: Add Transport Certificate and Key to Postman

To add your certificate and key to Postman:

1. Click File from the menu, then select Settings.
2. Click Certificates.
3. Click Add Certificate.
4. Enter uat-api.thredd.com in the Host field.
5. Click Select File under the CRT file heading. A window opens.
6. Navigate to the where you saved your Transport certificate and select the PEM file. Click Open. The window closes and the certificate is added to Postman.
7. Click Select File under the KEY file heading. A window opens.
8. Navigate to the where you saved your Transport key and select the KEY file. Click Open. The window closes and the key is added to Postman.
9. Click Add.

The Transport Certificate is now added to Postman.

Step Four: Import Postman Collection into Postman

You can download the Postman Collection from the API Explorer page. Ensure you download the Thredd IAM API Collection.

When you have successfully downloaded the collection, open Postman and import the collection.

1. Click File from the menu, then select Import.
2. Drag the downloaded collection into the window.

The collection displays and opens in Postman.

Step Five: Import Postman Environment File

The Postman Environment file includes the variables for the Postman Collection to work, and is where you enter your Client Secret and Client ID into the collection. You can download the Postman Environment from the API Explorer page.

To import the environment file:

1. Click File from the menu, then select Import.
2. Drag the downloaded file into the window.

The environment variables are added to Postman.

Step Six: Enter Client Secret and Client ID into Postman

To add the Client Secret and Client ID to the Collection:

1. Use the dropdown in the top-right of Postman to select the UAT Thredd environment.
2. Click the Variables button in the top-right corner of Postman. All variables for the environment display.
3. Enter your Client Secret from Thredd Portal into the client_secret field.
4. Enter your Client ID from Thredd Portal into the client_id field.

Step Seven: Generate Authentication Token

Before you can use the API endpoints, you must create an authentication token. To create the token:

1. Open the Authorisation folder in the Collection and select the Get Access Token endpoint.
2. Click Send.

An authentication token is created and automatically added to your variables. This token lasts for 60 minutes. When the token expires you will need to generate a new token to continue using the APIs.