I made a self-hosted web service in C# (but I don't think the language and framework matter here). The service requires NTLM authentication. When I test the service from Chrome everything works. If I test it from Postman then a certain check fails in the service. In my ApiController
I call ((WindowsIdentity)User.Identity).Owner.IsAccountSid()
and this method returns false when web calls are made from Postman. The owner's SID is S-1-5-32-544 (Administrators group), which is not an account.
In Postman I did set the username and password, as suggested in another answer. If I change the password, I get 401 Unauthorized, so this tells me I configured Postman correctly. But it doesn't work for me.
Is there a way to make Postman behave more like Chrome (where both direct link and call from JavaScript work correctly)?