You can try steps as mentioned by @Anmol_Bhardwaj Also for more details:If you are testing from an HTTP Client such as postman, you will need to configure the "Apache Sling Referrer Filter" and "Adobe Granite CSRF Filter". Otherwise, if your AEM page is making an HTTP Post request, it should be work...