How to change CORS setting on ION API gateway Infor OS Cloud Edition

Hello Everyone,

We are using InforOS Cloud Edition, I'm trying to make an ION API call from one of our internal servers at the office but am getting blocked by CORS. Does anyone know how to setup CORS to allow calls from any of our company servers?

Regards,

Matthew Wehrle

Power and Telephone Supply Co.

Find more posts tagged with

ION API Gateway

Accepted answers

All comments

Kevin Heiman

Matthew, can you clarify what Cloud API you are calling?

All ION API Gateway APIs are available over public networks. Or are you calling something non-ION API gateway, which is not allowed. Have you tested with Postman as well, although any client should be able to connect once authenticated.

Please add a little more detail.

Matthew Wehrle

Thank you for the reply. I've been using a simple html file staged on one of our local web servers via fetch. The API endpoint I'm trying to call is: https://mingle-ionapi.inforcloudsuite.com/OurTenantID/IONSERVICES/process/application/v1/workflow/start. The endpoint came from the swagger docs try-me output. I was surprised as well that it was blocked by CORS, figured it was probably something simple that needed tacked into a configuration file somewhere in ming.le or ION. Thanks. mw-

Kevin Heiman

You should not need any cloud configuration changes. Try with Postman or another tool. Postman is very simple to setup, and there is a youtube on it https://www.youtube.com/watch?v=RJCEsnzSdIM

The postman template makes it even easier.

If you email me I can send you a Postman template and a sample client app, Java .Net or Python.. (thePostman, Java and .Net will be released in the US August Infor OS update next week.

psullivan

Hi Matthew,

I did run into an issue once that required us to add a Request Policy to resolve the CORS error. I called the Policy DeleteOrigin which was defined as:

<header
xmlns="">http://www.infor.com/ion/api"
xmlns:xsi="">www.w3.org/.../XMLSchema-instance" name="header-example" displayName="header-example" enabled="true" version="1.0">
<action>delete</action>
<headerName>origin</headerName>
<headerValue>yourhostname</headerValue>
</header>

Matthew Wehrle

Thanks Patrick, really appreciate the information. Regards, mw-.

Legacy Contributor

Typically CORS issues are resolved by whitelist-ing the domain of the calling web application in ION API gateway. This is part of your Authorized app configuration in ION API. Can you add your domain to the "Authorized Javascript Origins" field in this screen and give it a try?

Legacy Contributor

I have the same CORS issue, but I get a response in the Workflow and get the response in Postman, but while testing it from the documentation of ION API, I get an error 'undocumented', TypeError: failed to fetch.

I tried setting the Endpoint policy to delete the Origin for header, still no luck, any suggestions?

antonio-caria

It's possible using Proxy but avoid it.

Copyright © 2025 Infor. All rights reserved.