Hi John,

Please check if EMS API is useful in this scenario.

If the request form is setup on different website (that isn't hosted on SMAX) then build a JSON object payload with all the data collected in the form and send it to SMAX using EMS API

Refer the documentation at EMS REST API, EMS Bulk Create/Update

Generate an authentication token by using POST call at https://<SMAX_Tenant>/auth/authentication-endpoint/authenticate/token?TENANTID=<TenantID>

Headers: Content-Type : application/json

Params: TENANTID : <TenantID>

Body: {"Login": <UPN of Integration User>, "Password": <Password of Integration user>}

(This integration user should have roles with permissions to create and edit requests in SMAX)

A token will be generated and copy the token

Then initiate a POST call at https://<SMAX_Tenant>/rest/<TenantID>/ems/bulk

Headers: 

Content-Type : application/json

User-Agent : Apache-HttpClient/4.1

Cookie : SMAX_AUTH_TOKEN=<token generated from previous POST call>

Body:

{
    "entities": [
        {
            "entity_type": "Request",
            "properties": {
                "DisplayLabel": "Test Request 1",
                "Description": "REST API Request Creation Testing",
                "RequestedByPerson": "4332697",
                "RequestedForPerson": "4332697",
                "ImpactScope": "SingleUser",
                "Urgency": "SlightDisruption",
                "RequestsOffering": "4611434"
            },
            "UserOptions": "{\"complexTypeProperties\":[{\"properties\":{\"Account_c\":\"4008771\",\"Contact_c\":\"4298495\"}}]}"
        }
    ],
    "operation": "CREATE"
}

Using the above POST call will create requests in SMAX.

We need to provide Id to update the values to any Entity-Link field

What is the use case? Do you need to use the catalog or some basic requests? Do you need to open the requests under different user names?

You have to consider all these aspects as you may need to perform preliminary REST calls to retrieve the relevant information before being able to actually submit the request.

Additionally, you need to make sure the calls are secured and you don't have a situation where people hitting the site can abuse the system and trigger a flood of requests bringing down SMAX.