All businesses have a lot of concerns about security. Sage commits to continuously improve the security of its products. The most popular protocols, HTTP and HTTPS, are supported by Sage X3 for network calls to a variety of services (internally and externally. The user’s home page or a page linked to a function are two ways of achieving this, but they are both less secure.<\/p>\n\n\n\n
In 2021 R3 (12.0.27), a mechanism has been implemented to enable security administrators to improve control over external calls through a dedicated administration page in Administration i.e. External URL policies. Administrators can create a whitelist of URLs using the external URL policies setup which can navigate through the below path:<\/p>\n\n\n\n
Administration<\/strong>-> Administration<\/strong>-> Settings<\/strong>-> External URL policies<\/strong><\/p>\n\n\n\n When you will open this setup screen you will find the URLs which are predefined integrations that sage maintains. See figure 1.<\/p>\n\n\n\n\n\n Now we will create our own URL policy for the website: https:\/\/www.wikipedia.org\/<\/strong><\/p>\n\n\n\n For adding the new website, you need to click on \u201cnew external URL policy<\/strong>\u201d from the actions as shown in the figure 2.<\/p>\n\n\n\n\n\n It will open the new window to create external URL policy and here we have added the required information. As shown in the figure 3.<\/p>\n\n\n\n Enter the name and the respective URL. Checkboxes for Enabled and Checked are present in the status section. Enabled checkbox used for the enabling and disabling the policy and Checked indicates that the administrator has verified the Enabled checkbox’s value. The Type identifies whether the URL will be a service or embedded.<\/p>\n\n\n\n\n\n For accessing the site which you have created URL policy can accessible by creating the new home page. For this we need to create the menu item having content as an URL. Refer the figure 4.<\/p>\n\n\n\n\n\n After creation of the menu item you need to add it into the homepage. For adding this you can navigate to the administration> home pages and create new home page as shown in the figure 5.<\/p>\n\n\n\n\n\n Then add this gadget into the homepage of the sage x3. You will get the Wikipedia site on the homepage. The Wikipedia site is displaying properly into frame. Refer figure 6.<\/p>\n\n\n\n\n\n To check whether the successive URLs will render, we will then click a link inside the embedded URL. As a test, I’ll click the English Wikipedia link. After selecting the English Wikipedia link, the content is blocked and the URL is NOT resolved. Refer figure 7.<\/p>\n\n\n\n\n\n Actually, this is the INTENDED behaviour for the handling of external URLs. The whitelist does not automatically include frames. It is done on purpose since adding a web page to a home page is simple and presents a risk that needs to be strictly controlled.<\/p>\n\n\n\n Since we have only authorised the URL https:\/\/www.wikipedia.org in our example, any other Wikipedia URLs are not permitted in the embedded frame. The external URL policy would need to be changed in order to enable the ensuing Wikipedia URLs. When specifying the Wikipedia URL, a wildcard (*) will be included.<\/p>\n\n\n\n So again, go to the External URL policies and change the URL from https:\/\/www.wikipedia.org\/<\/strong><\/a> to https:\/\/*.wikipedia.org\/<\/strong> to get the access to the other pages of the URL. Refer figure 8.<\/p>\n\n\n\n\n\n Go back to the X3 home page after saving the update. Refresh the session by logging out and returning into X3. Check the embedded URL once more by clicking the English Wikipedia link and search for the information. The integrated frame now resolves the following Wikipedia URLs. Refer figure 9.<\/p>\n\n\n\n\n\n Any website or domain that is mentioned on a screen or homepage but has not been added to the whitelist will be refused, as you can see in above example.<\/p>\n\n\n\n About Us<\/strong><\/p>\n\n\n\n Greytrix<\/a> \u2013 a globally recognized Premier Sage Gold Development Partner is a one-stop solution provider for Sage ERP and Sage CRM needs. Being recognized and rewarded for multi-man years of experience, we bring complete end-to-end assistance for your technical consultations, product customizations, data migration, system integrations, third-party add-on development and implementation expertise.<\/p>\n\n\n\n Greytrix<\/a>\u00a0caters to a wide range of Sage X3 (Sage Enterprise Management) offerings \u2013 a Sage Business Cloud Solution. Our\u00a0unique GUMU™ integrations include\u00a0Sage X3 for Sage CRM<\/a>,\u00a0Salesforce.com<\/a>\u00a0and\u00a0Magento eCommerce<\/a>\u00a0along with Implementation and Technical Support worldwide for\u00a0Sage X3<\/a>\u00a0(Sage Enterprise Management). Currently we are\u00a0Sage X3 Implementation Partner<\/a>\u00a0in East Africa, Middles East, Australia, Asia.\u00a0We also offer best-in-class\u00a0Sage X3 customization and development services<\/a>,\u00a0integrated applications such as\u00a0POS<\/a>\u00a0|\u00a0WMS\u00a0<\/a>|\u00a0Payment Gateway<\/a>\u00a0|\u00a0Shipping System<\/a>\u00a0|\u00a0Business Intelligence<\/a>\u00a0|\u00a0eCommerce<\/a>\u00a0and have developed add-ons such as\u00a0Catch \u2013 Weight\u00a0<\/a>\u00a0and\u00a0Letter of Credit<\/a>\u00a0for Sage X3 to Sage business partners, end users and Sage PSG worldwide.<\/p>\n\n\n\n Greytrix is a recognized Sage Rockstar ISV Partner<\/a> for GUMU™ Sage X3 \u2013 Sage CRM integration also listed on Sage Marketplace<\/a>; GUMU™ integration for Sage X3 \u2013 Salesforce is a 5-star app listed on Salesforce AppExchange<\/a>.<\/p>\n\n\n\n For more information on Sage X3 Integration and Services, please contact us at x3@greytrix.com<\/a>. We will be glad to assist you.<\/p>\n","protected":false},"excerpt":{"rendered":" All businesses have a lot of concerns about security. Sage commits to continuously improve the security of its products. The most popular protocols, HTTP and HTTPS, are supported by Sage X3 for network calls to a variety of services (internally and externally. The user’s home page or a page linked to a function are two\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,5,3162,13,8,3642,9,2796,11],"tags":[3866,1839,1871,2871,1881,1941,3865,3867],"class_list":["post-27385","post","type-post","status-publish","format-standard","hentry","category-standard","category-features","category-greytrix","category-integration","category-sage-erp-x3","category-sage-x3","category-sage-x3-consulting","category-technical","category-tips","tag-external-url-policies","tag-sage-x3-blogs","tag-sage-x3-features","tag-sage-x3-functional-blogs","tag-sage-x3-functionality","tag-sage-x3-technical","tag-url-setup","tag-whitelist-url-in-sage-x3"],"_links":{"self":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/posts\/27385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/comments?post=27385"}],"version-history":[{"count":9,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/posts\/27385\/revisions"}],"predecessor-version":[{"id":30226,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/posts\/27385\/revisions\/30226"}],"wp:attachment":[{"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/media?parent=27385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/categories?post=27385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.greytrix.com\/blogs\/sagex3\/wp-json\/wp\/v2\/tags?post=27385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}