⌘K

Apex Client v1.0 is now available with SSO. See what's new →

Welcome to Apex IAM Onboarding

Everything you need to integrate, configure, and deploy Apex IAM successfully.

Onboarding · Identity & Access

Get Started with Apex IAM

Access onboarding guides, API references, and IAM product documentation — everything you need to take your integration from first login to production.

IAM Product

Apex Web

Web portal for administrators and users.

Explore Web Portal

Apex Tenant

Manage organizations, configurations, roles, and policies.

Tenant Setup

Apex Client

Desktop client used for secure authentication and identity management.

Open Client Guide

Coming Soon

Apex Mobile

Mobile app for on-the-go identity verification and secure access.

Not yet available

APEX API Integration Manual V1.0

Availability, Performance, Experience Platform

Documentation History
Date	Version	Description	Author
2025-08-21	V1.0	APEX API Integration Manual	Darren Ong & Maisarah Ayob

Table of Contents

1.	Introduction
2.	Postman Configuration Setup
2.1	Prerequisites
2.2	Postman Configuration Steps
2.3	Get New Access Token
3.	How to Implement Platform OAuth 2.0
3.1	Getting Source Code in Postman
4.	API Reference

1. Introduction

This API Integration Manual provides a brief overview and step-by-step guidance for integrating with the APEX (Availability, Performance, Experience) platform. It describes the required configuration and authentication flow for API integration, including Postman setup, OAuth 2.0 configuration, and MyDigital ID authentication to obtain an access token from the APEX Authorization Server.

This document serves as a reference guide for developers and integration teams to understand the required setup, configuration parameters, and process for successfully connecting to and testing APIs on the APEX platform.

2. Postman Configuration Setup

2.1 Prerequisites

Before proceeding with the Postman configuration, ensure the following prerequisites are completed:

a)Postman is installed.

b)MyDigital ID mobile application is installed and successfully set up on your mobile device.

c)Client ID and Client Secret are available (provided separately during the onboarding process).

2.2 Postman Configuration Steps

Follow the steps below to configure Postman:

IOpen Postman and select "Create New Workspace". Enter the workspace name as APEX.

IICreate a new blank collection and name it APEX-integration.

IIIOpen the Authorization tab and select OAuth 2.0.

IVPaste the following information into Configure New Token and click Save.

Field	Value
Callback	`https://oauth.pstmn.io/v1/callback`
Auth URL	`https://api.oxs-iam.com/did/authorize/`
Token URL	`https://api.oxs-iam.com/did/token/`
Client ID	`<PLEASE REFER TO ONBOARDING MESSAGE>`
Secret	`<PLEASE REFER TO ONBOARDING MESSAGE>`
Scope	`openid`
Client Auth	Send client credentials in body

2.3 Get New Access Token

1Click "Get New Access Token" in the Postman environment.

2Scan the QR code using the MyDigital ID app.

3In the MyDigital ID app, a dialog reads "Anda setuju menghantar…". Tap YA.

4Enter your biometric input or credentials.

5Return to Postman, click Proceed, and retrieve the token.

3. How to Implement Platform OAuth 2.0

3.1 Getting Source Code in Postman

6Create a new request.

7Choose POST (or any applicable method).

8Paste the URL https://api.oxs-iam.com/did/token/ (or the relevant endpoint).

9Provide the request body as raw JSON, e.g. {"test":1}.

10Click the "Code" tab on the right sidebar.

11Choose the JavaScript code snippet (or C#, or any other supported language).

Postman - JavaScript code snippet option

12View the generated code.

13Implement the generated code into your existing application.

4. API Reference

Method	Resp.	Endpoint	Parameters / Response
GET	N/A	https://api.oxs-iam.com/did/authorize/	response_typeclient_idscoperedirect_uristate
N/A	302	https://api.oxs-iam.com/did/authorize/	Redirects to the QR code scanning page
GET	N/A	<your own callback>/?code=	codestate
N/A	302	<your own callback>/?code=	Processes the code and state; refer to /token below
POST	N/A	https://api.oxs-iam.com/did/token/	grant_typeredirect_uriclient_idclient_secretcode
N/A	200	https://api.oxs-iam.com/did/token/	JSON response: access_tokentoken_typeexpires_inrefresh_expires_inrefresh_tokennot-before-policysession_statescopeid_token
GET	N/A	https://api.oxs-iam.com/did/logout/	id_token_hintstatepost_logout_redirect_uri
N/A	302	https://api.oxs-iam.com/did/logout/	Redirects to your home page (or a specified URL) upon logout

Download Postman — https://www.getpostman.com/

Postman Collection

Import the APEX API requests straight into Postman

1. Get the collection file

The APEX-Integration.postman_collection.json file is provided as part of your onboarding package. It includes the Authorize, Token, and Logout requests pre-filled with the endpoints from the API Reference.

2. Open Postman and click Import

In Postman, go to your workspace's collections sidebar and click the Import button next to the "+" (new collection) icon.

3. Drag & drop, or browse to the file

In the Import dialog, drag the downloaded JSON file anywhere onto the window — or use select files to browse to it manually.

Use Resources

ImportResources

Drop anywhere to import

Or select files or folders

4. You're ready

Once imported, the APEX-Integration collection appears in your Collections list. Add the Client ID and Secret from your onboarding message to the collection's OAuth 2.0 authorization tab, then follow the steps in the Manual to request a token.

Requests in This Collection
#	Request Name	Method	Status
1	Authorize	GET	✓ Included
2	Get Token	POST	✓ Included
3	Logout	GET	✓ Included

3 of 3 API requests successfully packaged in this collection.