Vendor access to Postman SMS system
Learn how agency officers can set up vendor access and whitelist vendor domains.
Last updated 15 April 2026
Are vendors allowed to be Campaign Creators?
Vendors are not allowed to be Campaign Creators; they can only be assigned as Campaign Collaborators (members). Please refer to MDDI’s policy and clause stated in the AUP on FormSG.
Policy stance and AUP clause in FormSG
MDDI's Policy | FormSG |
|---|---|
Who can I add as a campaign creator? You will only be able to add officers from your own agency as campaign creators. This is defined as officers who have the same email domain as you. Vendors will not be allowed to have campaign creator access, as they are not allowed to create campaigns on behalf of agencies. They can be added to existing campaigns, under campaign settings. Please refer to this page for more information. | I am aware of and agree to comply with MDDI's policy regarding vendor access, which stipulates that vendors can only be assigned the Campaign Collaborator role for sending messages, the Campaign Creator role is exclusively for MINDEF/SAF Employees, and Campaign Creators are solely responsible for managing and overseeing Campaign Collaborators. |
How do vendors access and use Postman V2 for sending SMS messages?
Postman does not grant vendors access to the portal. This means vendors with non-whitelisted email domains cannot log into Postman V2. Agency officers should log into Postman V2, create the campaign, craft the message, whitelist the vendor’s domain, generate the API keys and pass the API keys to the vendors for the necessary integration.
How do I whitelist the vendor’s domain?
Agency PIC (Person-in-Charge) - SDD must submit a request for the Postman team to whitelist the vendor's domain#. This will allow vendors to log into Postman V2 and view campaigns that they have been added to by the agency admins. Vendors will then be able to log in and send messages, but not create campaigns (i.e., member access).
#The vendor's domain refers to their email domain (the part of their email address that comes after the @ symbol). For example, if a vendor's email address is john@vendorcompany.com, then "vendorcompany.com" is their domain that needs to be whitelisted. This whitelisting allows anyone with an email address from that vendor's domain to access the specified campaigns in Postman.