Hmm actually not sure if you specify type in postman, a couple things I'd check is that the restlets audiences are correct and also that your timestamp/signature is generated just before you request as they can time out.