Fiserv Apex Key Requirements for Glide Integration
Last updated: March 11, 2026
Overview
To integrate Glide with your XP2/APEX core system, Glide requires an Apex API key. This key allows Glide to securely authenticate as an approved vendor and perform agreed-upon actions within your core environment.
This guide explains what an Apex key is, why it is necessary, and how it relates to Trustgrid.
What is an Apex Key?
An Apex API key is an application-level credential issued from your XP2/APEX environment that:
Identifies Glide as an authorized application.
Controls actions Glide is permitted to perform.
Enables logging and auditing of Glide activity.
An Apex key is not a user login and does not represent an individual employee.
Why Glide Requires an Apex Key
Glide uses the Apex key to securely:
Submit account and/or loan applications.
Create or update records in XP2/APEX.
Retrieve required application and processing data.
Support auditing, troubleshooting, and compliance requirements.
Without an Apex key, XP2/APEX will reject Glide requests, and integration testing cannot be completed.
Apex Key Options: New or Recycled
Glide supports two options for key issuance and will validate your selection during testing.
Option 1: New Apex Key (Recommended)
Glide recommends issuing a new, dedicated Apex key. This ensures clear vendor-level auditing, easier troubleshooting, and simpler key rotation.
Option 2: Recycled or Previously Issued Key
A previously issued key that is no longer in use by another vendor may be reused if:
It has the required permissions for Glide.
It is still valid (not expired).
Your security team approves the reassignment.
Required Details
Your Digital Program Manager (DPM) will ask for the following information:
Credentials for Test and Production Environment:
Port
User Name
Device Name
Password
Suffix Length
FAQ
Do we need Trustgrid before providing the Apex key? Trustgrid must be active before the key can be tested, but the key can be created and shared in advance to speed up the process.
Can we reuse an old Apex key? Yes, provided it is currently unused, valid, and approved by your core and security teams.
Who generates these keys? Typically, these are managed by your XP2/APEX administrators, IT Security, or Core Administration teams.