# Securian Financial Group

> Securian Financial Group is a Minnesota-based mutual holding company providing life
> insurance, annuities, retirement plan solutions, investment management, group/workplace
> benefits and credit-union and bank insurance programs to individuals, employers and
> financial institutions. It is a Fortune 1000 company.
>
> Securian operates real production API infrastructure but runs NO public developer program:
> there is no developer portal, no published OpenAPI, no SDK on any package registry, and no
> self-serve signup. API access is obtained through a sales or partner agreement.
> Generated by the API Evangelist enrichment pipeline from apis.yml and the artifacts in
> this repository plus live probes; it is not published by Securian Financial Group.

## What is actually callable

- [OpenID Connect discovery — sso.securian.com](https://sso.securian.com/.well-known/openid-configuration): Securian's PingFederate authorization server. HTTP 200, application/json. The only anonymously readable machine-readable document Securian serves.
- [OAuth 2.0 Authorization Server Metadata (RFC 8414)](https://sso.securian.com/.well-known/oauth-authorization-server): HTTP 200, application/json.
- [JWKS](https://sso.securian.com/pf/JWKS): HTTP 200. Served off the /.well-known/ path.

## API hosts observed (all auth-gated, no anonymous contract)

- `https://api.securian.com` — Kong gateway. Every path returns 404 `{"message":"no Route matched with those values"}`.
- `https://api.connect.securian.com` — AWS API Gateway behind Imperva. Every path returns 403 `{"message":"Missing Authentication Token"}`. This is the host behind Securian Platform Connect.
- `https://api.lifebenefits.com` — AWS API Gateway for the LifeBenefits group-benefits platform. Every path returns 403 `{"message":"Missing Authentication Token"}`.

## Products that describe API integration (sales-gated)

- [Securian Platform Connect](https://www.securian.com/employers/flexible-administration/strategic-partnerships/securian-platform-connect.html): Group-benefits integrations with benefits-administration platforms — online Evidence of Insurability via SSO plus API notification, EOI decisions returned via API, single sign-on for supplemental health claims, medical claims integration, and file integrations for eligibility and death claims. Securian states it prioritizes API connections aligned to LIMRA's LDEx standards (EOIS and BEM profiles).
- [Strategic Partnerships](https://www.securian.com/employers/flexible-administration/strategic-partnerships.html): Named pre-built integrations with Alight Worklife, Benefitsolver (Businessolver), bswift, Benefitplace (Benefitfocus), Empyrean, BenefitConnect (WTW) and Workday via Helios.
- [FlexTech — Embedded Technology Solutions](https://www.securian.com/financial-institutions/products-solutions/embedded-technology-solutions.html): Embedded payment-protection for digital lenders, offered as hosted enrollment or API-based integration. Access via sales contact.

## Standards

- LIMRA Data Exchange (LDEx) — [EOIS and BEM profiles](https://www.limra.com/en/solutions-and-services/data-exchange-standards/ldex-overview/). Claimed by Securian in prose; no contract published to verify it against.
- OAuth 2.0 / OpenID Connect, PKCE (S256), PAR (RFC 9126), DPoP (RFC 9449), mTLS client auth (RFC 8705), Device Grant (RFC 8628), Token Exchange (RFC 8693), CIBA, introspection, revocation, dynamic client registration — all advertised by sso.securian.com.

## Company

- [Website](https://www.securian.com/)
- [Newsroom / news releases](https://www.securian.com/about-us/newsroom/news-releases.html)
- [Contact](https://www.securian.com/contact-us.html)
- [Legal information](https://www.securian.com/legal-information.html)
- [Privacy notices](https://www.securian.com/privacy-notices.html)
- [Cybersecurity and data privacy](https://www.securian.com/about-us/sustainability/inspiring-trust/cybersecurity-and-data-privacy.html)
- [LinkedIn](https://www.linkedin.com/company/securian-financial-group)

## Not available

- No developer portal, API reference, getting-started guide, changelog, status page or sandbox.
- No OpenAPI, AsyncAPI, GraphQL SDL, gRPC .proto or WSDL published on any Securian host.
- No MCP server, no A2A agent card, no llms.txt, no security.txt, no api-catalog.
- No first-party SDK on npm, PyPI, RubyGems, NuGet, Maven Central, crates.io or pkg.go.dev.
- No published API pricing, plans or rate limits.