Integration with External application using HTTP requests

Dear Community,

I have a customer requirements who needs to integrate his M3 CE MT environment with an external web application. This application should be able to sends HTTPS POST requests (specific XML structure, not SOAP) to a specific endpoint at M3 CE MT environment and get a formatted XML response from there.

The communication does not include any authentication information, "security" should be done by whitelisting public IP addresses of the external application.

I must precise that this external application is not an application owned by my customer and therefore, no adjustments can be done on the requests and responses formats provided by this application.

Do you have any advise on which tools should involved in such cases ? Can we use ION APIs ? Is Infor Application Connector (IMS) the appropriate tool we should implement ?

If you can confirm me which technology I should focus on in order to implement this interface, that would be great !!

Many thanks for your support.

David.

Find more posts tagged with

ION Connect

Comments

Christiaan Rentier

If the third party is sending requests without Authentication, the ION API can not be used. You would need a stepping stone that whitelists only the calling IP and connects to the MT Cloud using decent Authentication.

That stepping stone could be some webservice running at the customer using IMS via ION API to connect to the MT Cloud. Or IMS via Enterprise connector installed at the customer. Or any other service installed at the customer.

BUT

From Security point of view this means, you are opening your MT Tenant for an external party without proper authentication. Quite risky I think.

Especially because I presume the third party is outside the customers organization.

Carefully consider this security risk and the data exposed to the third party.

David Tollet

Hi Christiaan,

Many thanks for your response. This is confirming what I was thinking, we should then use IMS via Enterprise Connector.

Am I right that in this case we should implement a IMS server in customer infrastructure (potentially could be created directly on the Enterprise Connector server) and then the IP whitelisting should be managed through customer firewall rules ?

This IMS server ( based on the examples given in IMS Examples zip file found in ION documentation) will then communicate with MT environment ?

is this correct ?

Thanks.

antonio-caria

If external App use HTTPS (not HTTP) You can call it with WebService in H5 Scripts.

Of course is not a replacement of ION.

Christiaan Rentier

Yes the customer should host this stepping stone and carefully configure their firewall to allow traffic only from whitelisted IP to the Server where they run that IMS Client calling MT Cloud via ION API or via Enterprise Connector.

You can use the examples found in ION docs indeed or go to Github https://github.com/infor-cloud/ion-api-sdk

Again discuss with the customer the risk of exposing their data and monitor traffic to that stepping stone carefully.

Rgds

David Tollet

non appropriate answer ...

David Tollet

OK. Many many thanks Christiaan ! I'll investigate this then.

Regards,

David Tollet

Hi again Christiian,

I'm working on the solutions you advised me ... but I'm a little bit confused on which example I should rely on to implement the "stepping stone", as you called it, that will take care on relaying the HTTP POST call done by the external application to the MT Cloud via Enterprise Connector...

Should I use :

- IMS OAuth2 API client from examples found in ION Desk

- or IMS Sample Server (also from ION DEsk examples)

- or should I start from JavaWebClientOAuth2 from ion-api-sdk GitHub ?

as a reminder, my need is to build an application that will accept HTTP POST call from an external application and relay them in a secure way to the MT Cloud env.

Again, many thanks for your support.

Regards,

Copyright © 2025 Infor. All rights reserved.