BenefitsEdge API — Developer Portal

Staging / sandbox only. Operators: use admin call logs for full history.

Getting started

Authentication: Authorization: key <API_KEY> (obtain from ops; never commit secrets).

Encryption: POST bodies use AES-GCM JSON: { "ciphertext", "iv" } wrapping inner JSON. Key: deployment API_AES_KEY (autopopulated below in staging).

SAML init: POST /v1/api/saml/init → browser opens GET /v1/hold/:token → auto-post SAML to vendor ACS.

Sample inner payload: nyl-saml-init-inner.json

Architecture docs (repo): docs/api/README.md

Playground — SAML init

Prefer employee details (platform, accountKey, employee); legacy clientDetails still works. Key casing does not matter — the API lowercases keys on receive. This page encrypts your JSON as typed.

Payload:

Staging autopopulates the deployment key. Encryption runs in the browser; the key is not POSTed for encrypt.

Enter a valid AES key to preview the request body.
Skip SAML build; return placeholder redirect URL 
Send a request to see the response.

Recent API calls (last 10)

TimeMethodRouteIntegration APIIntegrationms
2026-08-06T13:43:16Z POST /v1/api/saml/init newyorklife 200 200 26114
2026-08-05T13:56:05Z POST /v1/api/saml/init newyorklife 200 200 2415
2026-08-05T13:30:19Z POST /v1/api/saml/init newyorklife 200 200 12581
2026-08-04T14:50:43Z POST /v1/api/saml/init newyorklife 200 200 3294
2026-08-04T14:30:36Z POST /v1/api/saml/init newyorklife 200 200 2756
2026-08-04T14:04:11Z POST /v1/api/saml/init newyorklife 200 200 1913
2026-08-04T14:00:38Z POST /v1/api/saml/init newyorklife 200 200 4093
2026-08-04T13:23:15Z POST /v1/api/saml/init newyorklife 200 200 4893
2026-08-04T13:21:34Z POST /v1/api/saml/init newyorklife 200 200 25640
2026-07-30T16:58:16Z POST /v1/api/saml/init newyorklife 200 200 7922

Call log refreshes in the background every 30s (playground state is kept). API 2xx + integration 4xx/5xx highlighted.