All businesses have a lot of concerns about security. Sage commits to continuously improve the security of its products. The most popular protocols, HTTP and HTTPS, are supported by Sage X3 for network calls to a variety of services (internally and externally. The user’s home page or a page linked to a function are two ways of achieving this, but they are both less secure.
In 2021 R3 (12.0.27), a mechanism has been implemented to enable security administrators to improve control over external calls through a dedicated administration page in Administration i.e. External URL policies. Administrators can create a whitelist of URLs using the external URL policies setup which can navigate through the below path:
Administration-> Administration-> Settings-> External URL policies
When you will open this setup screen you will find the URLs which are predefined integrations that sage maintains. See figure 1.
Now we will create our own URL policy for the website: https://www.wikipedia.org/
For adding the new website, you need to click on “new external URL policy” from the actions as shown in the figure 2.
It will open the new window to create external URL policy and here we have added the required information. As shown in the figure 3.
Enter the name and the respective URL. Checkboxes for Enabled and Checked are present in the status section. Enabled checkbox used for the enabling and disabling the policy and Checked indicates that the administrator has verified the Enabled checkbox’s value. The Type identifies whether the URL will be a service or embedded.
For accessing the site which you have created URL policy can accessible by creating the new home page. For this we need to create the menu item having content as an URL. Refer the figure 4.
After creation of the menu item you need to add it into the homepage. For adding this you can navigate to the administration> home pages and create new home page as shown in the figure 5.
Then add this gadget into the homepage of the sage x3. You will get the Wikipedia site on the homepage. The Wikipedia site is displaying properly into frame. Refer figure 6.
To check whether the successive URLs will render, we will then click a link inside the embedded URL. As a test, I’ll click the English Wikipedia link. After selecting the English Wikipedia link, the content is blocked and the URL is NOT resolved. Refer figure 7.
Actually, this is the INTENDED behaviour for the handling of external URLs. The whitelist does not automatically include frames. It is done on purpose since adding a web page to a home page is simple and presents a risk that needs to be strictly controlled.
Since we have only authorised the URL https://www.wikipedia.org in our example, any other Wikipedia URLs are not permitted in the embedded frame. The external URL policy would need to be changed in order to enable the ensuing Wikipedia URLs. When specifying the Wikipedia URL, a wildcard (*) will be included.
So again, go to the External URL policies and change the URL from https://www.wikipedia.org/ to https://*.wikipedia.org/ to get the access to the other pages of the URL. Refer figure 8.
Go back to the X3 home page after saving the update. Refresh the session by logging out and returning into X3. Check the embedded URL once more by clicking the English Wikipedia link and search for the information. The integrated frame now resolves the following Wikipedia URLs. Refer figure 9.
Any website or domain that is mentioned on a screen or homepage but has not been added to the whitelist will be refused, as you can see in above example.
About Us
Greytrix – a globally recognized Premier Sage Gold Development Partner is a one-stop solution provider for Sage ERP and Sage CRM needs. Being recognized and rewarded for multi-man years of experience, we bring complete end-to-end assistance for your technical consultations, product customizations, data migration, system integrations, third-party add-on development and implementation expertise.
Greytrix caters to a wide range of Sage X3 (Sage Enterprise Management) offerings – a Sage Business Cloud Solution. Our unique GUMU™ integrations include Sage X3 for Sage CRM, Salesforce.com and Magento eCommerce along with Implementation and Technical Support worldwide for Sage X3 (Sage Enterprise Management). Currently we are Sage X3 Implementation Partner in East Africa, Middles East, Australia, Asia. We also offer best-in-class Sage X3 customization and development services, integrated applications such as POS | WMS | Payment Gateway | Shipping System | Business Intelligence | eCommerce and have developed add-ons such as Catch – Weight and Letter of Credit for Sage X3 to Sage business partners, end users and Sage PSG worldwide.
Greytrix is a recognized Sage Rockstar ISV Partner for GUMU™ Sage X3 – Sage CRM integration also listed on Sage Marketplace; GUMU™ integration for Sage X3 – Salesforce is a 5-star app listed on Salesforce AppExchange.
For more information on Sage X3 Integration and Services, please contact us at x3@greytrix.com. We will be glad to assist you.