Download a Postman Collection that provides all of the calls available for each of our OneLogin resources. **Try it out with a test account first: **Start off using a Postman Collection with a test OneLogin account and API credentials. Once you’ve familiarized yourself with the API’s behavior, switch over to using your production OneLogin account and API credentials.
Setting Up Postman Environment Variables
To use the Postman Collections provided further down this page (and on each individual API doc page), you’ll need to set up environment variables in Postman. You’ll use these environment variables to set values that Postman needs to make an API call. Why don’t the Postman Collections include these values as delivered? This is because the values are unique, and even private, to your OneLogin account environment. For example, you’ll create environment variables to provide values for your client ID and secret, data shard, access token, subdomain, and so forth. Setting up the environment variables requires some upfront work, but will make repeated use of the Postman Collections a lot more convenient. To set up Postman environment variables:
If you do not already have Postman installed, install it.
- Identify the environment variables that you want to define. Download and open a OneLogin Postman Collection. Variable names are wrapped in `{{ }}`. For example, `{{access_token}}`. You'll see these environment variables in the endpoint URL and Headers areas of the Postman Collection. For example:

- In the top right corner of Postman, click the environment selector and select **Manage environments**.

Click Add to add a new environment where you'll define your OneLogin environment variables.
- Give the environment a name that clearly identifies the OneLogin API version and environment. For example:

- In the **Key** field, enter the name of the environment variable present in the Postman Collection, minus the `{{ }}`. In the **Value** field, enter your OneLogin account-specific value that will replace the variable when the call is made. For example:
Note: You'll need to use your API credentials to generate the access_token value. Access tokens expire 10 hours after creation, so you'll need to update the access_token environment variable value more often than the other values you've defined. Warning: If you share your Postman Collections, be sure to not inadvertently also share your API credentials or access token values.
Once we've defined your key value pairs, click Submit.
Use the OneLogin Postman Collection to make some calls. Be sure that the correct environment is selected.
- ```text
.onelogin.com ``` ## Version 1 Collections Collections for [version 2 APIs can be found here](/api-docs/2/getting-started/postman-collections). OAuth 2.0 Access Tokens
Use this collection to generate an
access_tokenthat can be used to make requests using the other collections.Download Events
Use this collection to get events and event types.
Download Groups
Use this collection to get groups.
Download Invite Links
Use this collection to send invite links.
Download Multi Factor Authentication
Use this collection to assign multi-factor devices and perform token verifications.
Download Privileges
Use this collection to create and manage privilege configurations.
Download Roles
Use this collection to get roles.
Download SAML Assertions
Use this collection to generate a SAML assertion for a given application.
Download Users
Use this collection to manage users, assign roles and perform authentications.
Download Have a Question?
Found a problem or a bug? Submit a support ticket.
Looking for walkthroughs or how-to guides? Check out our Knowledge Base.
Have a product idea or request? Share it in our Ideas Portal.