.png)
Applied Epic Integration Guide
Applied Epic integrates with enterprise systems primarily through Applied Systems-authorized REST APIs using OAuth-based access and controlled synchronization workflows.
Applied Epic integration options at a glance
Applied Epic is principally integrated through Applied Systems-authorized REST APIs. Depending on the tenant, subscription, API program, and permissions, Martini can retrieve and update Accounts, Contacts, Policies, Claims, Activities, and Opportunities. OAuth-based authorization requires an approved application and securely managed credentials. General-purpose webhooks, callbacks, bulk APIs, attachment APIs, GraphQL, SOAP, and direct database access are not publicly confirmed and should be validated with Applied Systems. Where event delivery is unavailable, Martini can schedule incremental REST API polling with pagination, checkpoints, overlap windows, mapping, validation, and controlled retries.
Common Applied Epic integration patterns
Common Applied Epic data objects used in integrations
Authentication and security considerations
OAuth-based authorization
Applied Epic API access generally requires an Applied Systems-approved application and OAuth-based authorization. The exact grant, scopes, token lifetime, and tenant-selection process must be confirmed through Applied Systems onboarding.
Tenant and permission controls
Access may depend on the agency, tenant, subscription, partner status, object permissions, and user or application authorization. Do not assume that normal agency administrator credentials can be used directly for API access.
Secret protection
- Store client credentials, refresh tokens, and access tokens in Martini secrets or secure environment configuration.
- Do not place credentials in mappings, source code, request payloads, or routine logs.
- Use separate credentials and configuration for development, testing, and production where available.
- Apply least privilege to Accounts, Contacts, Policies, Claims, Activities, and Opportunities.
Sensitive insurance data
Policies, Claims, Contacts, and related information may be confidential or regulated. Restrict payload logging, define retention policies, and limit downstream data to what each business process requires.
Operational considerations for Applied Epic integrations
Pagination and incremental retrieval
Do not assume one response contains all Accounts, Policies, Claims, or Activities. Follow the Applied Epic API's documented pagination method and use modified-date filters, cursors, or equivalent incremental criteria where available.
Rate limits and concurrency
Universal Applied Epic request limits were not publicly confirmed. Limit concurrency, use controlled page sizes, honor rate-limit responses, apply exponential backoff, and prevent overlapping scheduled runs.
Checkpoints and idempotency
Persist the last successful synchronization time, pagination cursor, object identifiers, and retry state. Use a small overlap window for timestamp boundaries and stable Applied Epic identifiers to prevent duplicate writes.
Relationships and ownership
Process related data in an appropriate order, such as Account, Contact, Policy or Claim, then Activity. Define which system owns each field before implementing bidirectional synchronization.
Schema and testing
Object fields, permissions, relationships, and enumerations may vary by API version or tenant. Version mappings, validate required fields, test representative data, and monitor for schema or permission changes.
Error handling
Retry transient failures and rate-limit responses, but route authentication and validation failures for operational attention. Capture rejected object identifiers and messages without exposing sensitive payloads.
Why use Martini instead of scripts or point-to-point integrations?
Orchestrate more than an API call
Point-to-point scripts often combine authentication, pagination, transformation, business rules, retries, and logging in one fragile implementation. Martini separates these concerns into maintainable workflows and reusable integration assets.
Support changing integration requirements
Martini can consume the Applied Epic REST API, map its objects to different target models, apply field ownership rules, and expose a controlled REST API for downstream consumers. The same workflow approach can support scheduled polling or a confirmed vendor callback.
Improve operational reliability
- Persist checkpoints and process bounded pages instead of relying on one large request.
- Apply controlled retries and distinguish transient failures from permanent data errors.
- Centralize secrets and environment configuration.
- Monitor workflow execution and troubleshoot failed objects without rerunning an entire synchronization.
Keep vendor boundaries explicit
Martini does not require direct database access to Applied Epic or an assumed native connector. It works through the vendor-approved API boundary while providing the orchestration, transformation, validation, and API exposure needed around that boundary.