How secure, real-time API integration on IBM i (AS400) enabled credit scoring, credit reporting, and digital payment collection without disrupting core operations.
A leading insurance and financial services enterprise operating on IBM i (AS400) needed to integrate with third-party platforms for real-time credit scoring, full credit reporting, and digital payment collection.
While their core systems were stable and transaction-heavy, they lacked modern API connectivity, automated token management, and scalable response handling. The objective was clear: enable secure, real-time API communication without disrupting core operations while maintaining performance, compliance, and extensibility.
The organization needed to connect a stable, transaction-heavy IBM i (AS400) environment to modern third-party APIs for credit scoring, credit reporting, and digital payment collection, without disrupting core operations.
The client needed to retrieve credit-based insurance scores through HTTPS API calls. This required secure token-based authentication with automated refresh, management of large XML request and response payloads, and efficient parsing of XML responses within RPGLE. API failures caused by long address fields and oversized responses had to be resolved, and the integration had to remain compatible with existing policy processing systems.
Beyond scores, underwriting required detailed reports including reason codes. Complex XML structures had to be parsed so that transaction ID, score, and reason codes could be extracted reliably. Large payloads created performance bottlenecks that needed addressing, and the impact of the optional DOB field within incoming XML had to be managed.
To modernize collections, the client required automated generation of secure payment links. This meant generating structured JSON requests from RPGLE, establishing secure HTTPS communication from IBM i, storing and returning dynamic URLs, and making the solution callable from multiple platforms.
Nalashaa implemented a client-aligned modernization approach that prioritized business continuity while enabling gradual transformation. The client continued leveraging the stability of their AS/400 environment, incrementally transitioned integrations and interfaces to a modern insurance platform, and addressed enhancements, issues, and modernization in a single cohesive engagement. We built a structured integration framework directly within IBM i using RPGLE and stored procedures.
01
Real-time scores retrieved directly from IBM i
Secure HTTPS calls were configured using authentication tokens, supported by an automated token refresh program (AQVERTKNC / AQVERTKNR) that renews tokens every 45 minutes.
SQLRPGLE programs automated the API request and response cycle, exposed through a reusable stored procedure, GET_CREDIT_SCORE.
Storage was enhanced using CLOB to handle large payloads, with XMLTABLE-based parsing optimization to extract the score and an output parameter added for the transaction ID.
SSL certificate authorization and version tagging for XML compliance were set up alongside the integration. Post-go-live RCA and production stabilization support followed the release.
02
Detailed underwriting data, retrieved without manual intervention
A SQLRPGLE program was built to retrieve reason codes for underwriting, going beyond the score alone.
The accompanying stored procedure returns transaction ID, credit score, and reason code together, using XMLTABLE for structured parsing of complex response formats. Memory handling was optimized using CLOB, and analysis was conducted on the impact of the optional DOB field within incoming XML.
The result is a production-ready interface callable from multiple platforms. Underwriting systems can now retrieve detailed credit insights in real time without manual intervention.
03
Secure payment links generated from RPGLE
An RPGLE program (AQTRANSPAY) was developed to handle payment link generation from within the core environment.
JSON_OBJECT is used to dynamically construct the payment request JSON, and the reusable stored procedure GET_PAYMENT_LINK returns the dynamic secure payment URL.
The procedure can be invoked from any upstream platform, which automated payment link generation, reduced dependency on manual payment workflows, and accelerated policy issuance and collections.
04
Coexistence, not replacement
AS/400 was retained as a trusted system of record, preserving decades of proven business logic, while legacy interfaces were decoupled to reduce long-term technical risk. Insuresoft hosts and manages the evolving integrations.
The framework rests on a defined technology and control set:
This architecture supports coexistence, pairing legacy stability with modern extensibility, so modernization progressed at a pace fully controlled by the client.
From the client's standpoint, the architecture delivered:
AS/400 retained as a trusted system of record, preserving decades of proven business logic
Decoupling of legacy interfaces to reduce long-term technical risk
Modern platform (Insuresoft) used to host and manage evolving integrations
Secure, scalable connections with third-party insurance data and payment providers
An architecture that supports coexistence, legacy stability with modern extensibility
This architecture enabled modernization without sacrificing reliability.
CORE TECHNOLOGIES
OPERATIONAL CONTROLS
Real-time underwriting decisions
Manual report pulls eliminated
Instant digital payment enablement
Payload-related API failures resolved
Multi-platform callable stored procedures
Secure token lifecycle automation
By building reusable stored procedures and secure API orchestration layers, the client now benefits from:
A scalable integration framework
Strengthened security posture
Faster underwriting workflows
Modernized payment collections
Future-ready digital extensibility
With a secure API foundation in place, the organization is now positioned to
Expand fintech integrations
Enable additional underwriting data sources
Enhance digital customer journeys
Modernize incrementally without business disruption
Modernizewithout replacing.
Integratewithout disrupting.
Deliverwithout compromise.
Tell us about your AS400 environment and the credit, payment, or third-party integrations you need. We will help you connect them securely without replacing core operations.