We are trying to integrate an outside application with Epicor via API calls. I’m assuming that we need to open Epicor to be outward facing for this to happen. The best way to do this would probably be to create an inhouse outward facing app that could consume the call from outside and then call th…

[image] tmayfield: I’m assuming that we need to open Epicor to be outward facing for this to happen. Not necessarily. You can use an intermediary like Azure Relay. I plan to put out an example soon.

When you go to API Key Maintenance, you setup everything you need for the API right there. The calls that are available can be fine tuned using the access scope. As long as you use the right credentials in your API call, it shouldn’t matter what third party app you call from. I could be [ally mcbe…

[image] tmayfield: The best way to do this would probably be to create an inhouse outward facing app that could consume the call from outside and then call the api inside. I missed this part, but yes, something like a minimal api is an option. Just make sure you secure it properly.

[image] tmayfield: Any other suggestions on a quick and dirty best way to allow an outside app to use Epicor API’s? The quick and dirty (and secure) way is probably Automation Studio. No ports to open. [image] Series 1 EpiSode 2: Automation Studio EpiUsers the Podcast …

We’re on-prem so we aren’t outward facing. For the access scope stuff I thought (could be wrong) that it is just a way to limit what someone will see when they use an API key you provide.

[image] Mark_Wonsil: The quick and dirty (and secure) way is probably Automation Studio. No ports to open. Right, some middleware software with an “agent” facilitating network traffic so that you don’t have INBOUND traffic coming into your appserver is ideal. Or if you can pull from Epicor i…

[image] TomAlexander: I’m curious to hear more on this one I was gonna wait until I released my tool, but I can probably just rip out a simple example.

[image] tmayfield: For the access scope stuff I thought (could be wrong) that it is just a way to limit what someone will see when they use an API key you provide. That’s a layer 7 security tool, but with an open port, people could do a Denial of Service attack and bring your ERP to its knees…

I’m not an expert like most of the guys here but we’re also on-prem and we have REST integrations with external apps. We’re using a serverless Azure function which acts like a middleman. External apps call the function in Azure, then the function calls Epicor API’s. Epicor’s side, we have firewall r…

Interesting. I’ll have to look at that option. If you would be willing to share a little more about how you are doing that would be awesome.

REST API and External Applications

Kinetic ERP

Mark_Wonsil (Mark Wonsil) September 18, 2024, 6:20pm 5

The quick and dirty (and secure) way is probably Automation Studio. No ports to open.

Topic		Replies	Views
Exposing REST API outside of network Epicor ERP 10 rest	11	5402	December 12, 2018
Epicor REST outside the domain Epicor ERP 10 e10 , rest	25	8291	March 31, 2021
Connecting MS Power Apps to Epicor Epicor ERP 10 rest-api	4	2984	September 8, 2022
Integration to Epicor - General Question Kinetic ERP integration	24	9966	June 3, 2022
Security considerations when POSTing from outside a firewall Epicor ERP 10 rest	8	663	September 16, 2021

REST API and External Applications

Related topics