Req approval via email on Landmark v11

we are trying to figure out how to enable req approval via email without needing user authentication or VPN.

has anyone setup this?

Infor is saying this is not possible without VPN or having lawson accessible outside of network.

is there a workaround to this by having a specific link or ports opened up and it only allows two options (approve or deny) ?

I found this info on Landmark Help - may be there is something that can be done using the address and ports here ?

https://docs.infor.com/lmrk/11.0.x/en-us/lmrkolh/default.html?helpcontent=lpaag_cl/tbr1541473408901.html

thanks for input.

Find more posts tagged with

Process Automation (IPA) - General Discussions

Comments

bhillz

Are you sure that you do NOT want authentication/re-authorization of a user? Email is not a secure method for data transfer. Every server along the way could review/alter the message before it is delivered.

Consider this scenario: Req is made, approval request is sent to User A.

User A questions the approval and forwards it to person B (who may/maynot have access or authority to approve).

Person B forwards it to Person E. (Or Person E intercepts email from person

.

Person E open email and (intentionally or unintentionally) selects the approve.

Reviewing the logs, it appears as if User A has approved the req.

User A is fired for misuse of funds. Person B is implicated on conspiracy. Both are befuddled.

Security, while it can be a nuisance at times, attempts to ensure proper protocols are maintained. The person performing the actions IS who they claim they are.

russel-cornelson

Good morning Vipul,

In order to approve a requisition via email on Landmark v11; you would need to be connected to VPN or you would need to expose the primary authenticating system outside of network.

For reasons CGaware mentioned above, IPA now has several layers of security for email approval to protect you. The links in the email lead back to a specific workunit, and are tied to a specific actor. If User A gets an email for approval, and forwards it to anyone else ... if they log in as any other user than user A they would be unable to approve the request unless they are a proxy for user A. To achieve security around this we need you to be in an authenticated session so we know you are approving, which means VPN or exposed external.

I will mention this .. we are working towards integration with Mingle Inbox/Inbasket ... which I believe has a mobile application that would allow approval. Fairly certain though this would require access to the server so vpn/exposed web front as well.

Copyright © 2025 Infor. All rights reserved.