Testing with Postman

Setting Up Postman

Download and install Postman from https://www.postman.com
Create a new Collection called "Innovis API"
Set up environment variables for UAT and Production

Environment Variables:

Variable Name	UAT Value	Production Value
base_url	https://staging.innovisweb.com/InnovisGateway/orest/grs_v001/request	https://gateway.innovisweb.com/InnovisGateway/orest/grs_v001/request
oauth_token_url	(See OAuth 2.0 Authentication Documentation)	(See OAuth 2.0 Authentication Documentation)
client_id	(Your UAT Client ID)	(Your Production Client ID)
client_secret	(Your UAT Client Secret)	(Your Production Client Secret)
customer_id	(Your UAT House Number)	(Your Production House Number)
end_user_code	(Test End User Code)	(Production End User Code)

Testing Credit Report Request

Step 1: Obtain OAuth Token

Create a new request to obtain OAuth token
See OAuth 2.0 Authentication Documentation for detailed steps
Store the access_token in an environment variable

Step 2: Configure CR Request

Method: POST
URL: base_url
Headers:
- Authorization: Bearer oauth_token
- Content-Type: application/json

Step 3: Request Body

{
  "customerId": "{{customer_id}}",
  "customerTraceNumber": "TEST-{{$timestamp}}",
  "endUserCode": "{{end_user_code}}",
  "productCode": "CR",
  "permissiblePurposeCode": "17",
  "softwareProviderId": "TEST",
  "applicants": [
    {
      "applicantId": "1A",
      "names": [
        {
          "first": "John",
          "last": "Smith"
        }
      ],
      "ssn": "900991234",
      "dob": "1985-06-15",
      "phones": [
        {
          "phoneNumber": "5551234567"
        }
      ],
      "emailAddress": "[email protected]",
      "ipAddress": "192.168.1.1",
      "addresses": [
        {
          "addressIdentifier": "C",
          "line1": "123 Main St",
          "city": "Springfield",
          "state": "VA",
          "zip": "22150"
        }
      ]
    }
  ]
}

Step 4: Send Request and Verify Response

Click "Send"
Verify returnCode = "Record"
Copy reportReferenceNumber and consumerId for SECONDUSE testing

Testing SECONDUSE Request

Prerequisites:

Successfully completed CR request
Stored reportReferenceNumber and consumerId from CR response
Noted original inquiry date/time

Request Configuration:

Method: POST
URL: base_url
Headers: Same as CR request

Request Body:

{
  "customerId": "{{customer_id}}",
  "customerTraceNumber": "TEST-SU-{{$timestamp}}",
  "endUserCode": "{{secondary_end_user_code}}",
  "endUser": "Secondary Test Bank",
  "productCode": "SECONDUSE",
  "permissiblePurposeCode": "17",
  "softwareProviderId": "TEST",
  "accessMethod": "ID",
  "originalInquiryDate": "2026-02-18 14:30:05",
  "reportReferenceNumber": "INNV-2026-001234567",
  "applicants": [
    {
      "consumerId": "9876543210"
    }
  ]
}

Safe Test Data Guidelines

To avoid triggering content filters, use these patterns:
SSN: 900-99-xxxx range (e.g., 900991234, 900992345)
Phone: 555 prefix (e.g., 5551234567)
Email: @example.com domain
Names: Common test names (John Smith, Jane Doe)
Addresses: Generic street names (Main St, Oak Ave)