Primerica API Gateway
Primerica's own API gateway (Broadcom/CA Layer7 — unmatched paths return a SOAP "Policy Falsified" fault in the layer7tech policy-fault namespace). It fronts the backend-for-frontend routes used by the MyPrimerica client portal, including /prod/exp/pc2/bff and the client login BFF OIDC issuer at /prod/exp/client/login-bff/v1/oidc. It serves conformant OIDC provider metadata anonymously, and that metadata advertises a Swagger description at https://gtw.primericaonline.com:8443/apidocs/auth/oauth/v2/swagger — but port 8443 refuses connections from the public internet, so the one API description Primerica points at cannot be retrieved. Every functional route is credential-gated and undocumented; this is first-party infrastructure, not a product a third party can integrate with.