How to access IFS Cloud from the Internet¶
IFS Cloud should never be exposed directly to the internet without a fronting reverse proxy
Calls should be forwarded through an external reverse proxy with filtering capabilities (e.g. Netscaler, Big-Ip, IIS, Apache, NginX). Caution should always be taken when making sensitive systems accessible from the Internet. Depending on which functionality needs to be accessed from the Internet, only the required requests should be forwarded to the backend servers.
Forward filtering and whitelisting of IP addresses are advisable.
See some proxy configuration examples here
Note: For security reasons - when exposing environments to internet FQDN certificates (not self-signed or wildcard certificates) should be used.
Endpoints to where request may be forwarded to.¶
Some endpoints with static content are unauthenticated, e.g.: / /landing-page /auth/* /timclo
| Functionality | Endpoint |
|---|---|
| Landing page | / |
| Landing page | /add-on/* |
| Landing page | landing-page/add-on.html |
| IFS Cloud Mobile | /mob/ifsapplications/* |
| Aurena B2B | /b2b/ifsapplications/* |
| Aurena B2B | /b2b/ifsapplications/extensions/* |
| End User Documentation | /ifsdoc/* |
| Integration | /int/ifsapplications/* |
| Integration Workflow | /int/ifsapplications/projection/engine-rest/ |
| Integration SOAP gateway | /int/soapgateway |
| Aurena | /main/ifsapplications/* |
| Aurena Workflow | /main/ifsapplications/projection/engine-rest/* |
| Aurena Workflow | /main/ifsapplications/bpa/* |
| Aurena | /main/ifsapplications/extensions/* |
| Authentication | /auth |
| User Federation using SCIM | /ifsapplications/SCIM/v2/ |
| Remote Assistance | /ifsapprasvc |
| Aurena | /appsvc/appsrv/* |
| Aurena gisint | /appsvc/gisint/* |
| Aurena Time Clock | /timclo |
| Aurena Time Clock | /int/ifsapplications/projection/v1/TimeClockService.svc/* |
| Aurena Payroll | /int/ifsapplications/projection/v1/EmployeeMasterDataService.svc/* |
| Aurena Payroll | /int/ifsapplications/projection/v1/PayrollTransactionService.svc/* |
| Aurena Payroll | /int/ifsapplications/projection/v1/EmployeeAbsenceDataService.svc/* |
| Demand Client | appsvc/demand/* |
| Maintenix | /amapi |
| Maintenix | /arc |
| Maintenix | /aerobuy |
| Maintenix | /finance |
| Maintenix | /jobcard-management-api |
| Maintenix | /help-viewer |
| Maintenix | /lmocweb |
| Maintenix | /maintenix |
| Maintenix | /mcmapi |
| Maintenix | /mxapi |
| Maintenix | /mxapiext |
| Maintenix | /mxcorews |
| Maintenix | /procurement |
| Maintenix | /pubsub |
| Maintenix | /recxfrapi |
| Maintenix | /wpl-web |
| Maintenix | /cmsApi |
| Advanced Optmization | main/ifsapplications/projection/v1/SchedulingServices.svc/* |