Postman can make REST API call to get access_token for a service principal authenticated with Azure AD.