Installation step 3: Enable communication with SAP Business One

Once you have set up your license and database details in the Boyum Portal, you need to establish the connection between the backend of Cloud Apps and SAP Business One.

Why firewall settings matter

Your company has certainly set up a strong firewall to protect your servers from undesired access. Normally, an IT infrastructure would block all access except the requests that originate from specified (whitelisted) IP addresses. This means that, in order to enable the communication between Cloud Apps and SAP Business One, your firewall and routing rules should be configured to allow requests sent to the SAP Business One Service Layer from the IP addresses used by Cloud Apps. In most companies, changes to the firewall are the responsibility of the IT department, and they need a valid justification why to allow access to an application.

How to connect to the SAP Business One Service Layer

1. Find Service Layer address

Cloud Apps communicates with the Service Layer of your SAP Business One installation. For this purpose, Cloud Apps needs the public address of the server running the SAP Business One Service Layer and the port number where the Service Layer can be reached.

Typically, the SAP Business One Service Layer is assigned to port 50000. Thus, the URL of the Service Layer looks like

https://<address>:50000/b1s/v1/

In case you have connection issues with the SAP Service Layer, you may be interested in the Help center article The SAP Business One Service Layer: role, configuration, connection check.

2. Whitelist IP addresses

Depending on the geographical region that you selected when you set up the database in the Boyum Portal, Cloud Apps uses fixed IP addresses to communicate with SAP Business One. The relevant IP addresses need to be added to the firewall whitelist for the SAP Business One Service Layer port.

The IP addresses to be whitelisted for Build, Produce and Inspect are as follows:

For Schedule, make sure to whitelist the IP address

• 51.145.237.187

Once Cloud Apps has been connected to the SAP Business One Service Layer, you can continue with setting up the SAP Business One company database.

Service Layer external usage change in SAP B1 2502 HF1

Starting with SAP Business One 2502 HF1, the way external systems interact with the Service Layer has changed.
To enable external communication, you now need to configure the external IP address in the Service Layer settings.

Configuration file paths:

Windows
C:\Program Files\SAP\SAP Business One ServerTools\ServiceLayer\Conf\httpd-b1s-lb.conf

Linux:
/usr/sap/SAPBusinessOne/ServiceLayer/conf/httpd-b1s-lb.conf

If this configuration is missing, you may encounter the following error:
403 Forbidden – You don't have permission to access this resource.

This update impacts all products that communicate via the Service Layer.

For detailed instructions, see and SAP’s official note.

If, after an SAP update, the connection to Cloud Apps is not working, this is most likely related to the same issue. Even after unbanning the database, you will be able to log in, but the connection will remain inactive until the external IP is properly configured in the Service Layer.

Next installation step:

Set up the SAP Business One company database