web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics AX (Archived)

Exposing AIF for Extranet application

(0) ShareShare
ReportReport
Posted on by

I am working on a project to convert our existing legacy erp extranet app to now integrate with AX. The extranet is located on our networks DMZ. For data retrieval we have mostly been using a replicated SQL database and this has worked out very well. For the final piece we need to expose an on the fly generated PDF report directly from AX. (We are weighing this against just recreating the report from the data but think AIF is probably the best design route). We would like to pass AIF a few parameters and AIF could return a file location on DMZ shared disk.

Anyway, my question is what is the best/secure way to expose an AIF service to the DMZ.

Should we attempt to use this intermediary user (http://daxmusings.codecrib.com/2011/11/trusted-intermediary-in-aif-services.html)?

Also, do we attempt to communicate with the AX server directly? Is this a security risk? Extranet > AIF AX

Or should we develop some sort of middleware webservice to communicate between the Extranet and the AX AIF server.

Extranet > Internal Web service > AIF AX

Thanks for any guidance.

2012 R3 CU10

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    on at

    Can anyone comment? thanks

  • Suggested answer
    Mea_ Profile Picture
    60,284 on at

    Hi js79,

    You can build a custom service technet.microsoft.com/.../hh509052.aspx that accepts whatever you need and returns you file path and then expose it using HTTP adapter to external network technet.microsoft.com/.../hh496418.aspx , it can also be used with HTTPS.

  • Community Member Profile Picture
    on at

    Right.. but what is best practice for exposing these services to the outside world? Should I be using an integration service in between to improve security? Thus keeping the ax server hidden from on the dmz? Or is https enough?

  • Mea_ Profile Picture
    60,284 on at

    It depends  on your requirements, but usually HTTPS is enough for internet facing services. If you want you can put your own service that talks to AX via net tcp and expose service to internet, but do you think that it would have better security ?

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics AX (Archived)

#1
Priya_K Profile Picture

Priya_K 4

#1
Martin Dráb Profile Picture

Martin Dráb 4 Most Valuable Professional

#3
Ali Zaidi Profile Picture

Ali Zaidi 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans