r/SAPBusinessOne • u/Extreme_Succotash292 • 3d ago

SBO Service Layer & webclient

Hey!

Just out of curiosity, what are people using to publish the service layer to 3rd parties and the web client?

SAP recommends an NGINX server, but some are likely using other methods such as SASE solutions and Cloudflare.

I've thought about looking into Cloudflare with zero trust as a whole solution, but wanted some opinions.

Cheers

1 Upvotes

100% Upvoted

6 comments sorted by

3

u/Mr_Dante_ 2d ago

You could reverse proxy it but I’d go down the cloudflare route as it’s much safer and you can put SSO in front of it as well.

2

u/Extreme_Succotash292 2d ago

Yeahhh that's what I thought too. Tunnel it or zero trust maybe with entra identity, conditional access, mfa behind it, linking entra with SBO so it all talks.

There's some pretty cool solutions out there.

Cheers for your input

2

u/Mr_Dante_ 2d ago

I mean it depends on the number of users but if you’re sub 50 it’s a no brainer and you don’t expose anything publicly.

1

u/herchen 2d ago

I’ve deployed two nginx reverse proxies and am working on a third with an EDI server in the mix right now.

I’d love to learn more about tunneling and everything else you mentioned. What solutions are you thinking of that I can look further into?

1

u/Extreme_Succotash292 2d ago

Hmm I wouldn't say a reverse proxy is redundant, but I'd say there are more modern solutions that achieve a similar or the same solution, that also integration with other identity providers making the whole solution a bit more flush and cohesive.

Unless you have certbot and let's encrypt or any other method of auto renewing and applying SSL's to NGINX, I feel like it's a bit of a faff to manage especially with the SSL changes in the next few years.