Skip to Content
[Note by Peter Hartwich on August 4th, 2015: Dear readers, please note that information in this blog is now up to three years old. Some comments might still be up to date and useful, others not, or contexts from recent releases are missing. Please check out and follow the current and official documentation accompanies the software. In addition, I can only recommend searching for SAP notes first.]
[Note by Peter Hartwich on June 9th, 2016: Blog Closed now (Existing comments will be displayed, new comments are not allowed)]

After struggling a few days to activate the connection from iPAD on SAP Business One through the Integration Service, I write this little “HOW TO” with full configuration of  various elements, hoping it might help someone in the future.

Our situation:

=> Sap Business One 8.82 PL 05

=> MSSQL 2005 without istance name

=> MSSQL port 1433

=> Sap Business One IPAD app version 1.6.0

Well… first of all.. It seems that the iPAD connection does not work on port 8080. For us, it was necessary to use port 8443 (https).  The app works correctly on that port even without a certificate.

So….

  1. INTEGRATION FRAMEWORK SETTINGS
    1. Open the Integration Framework (from SAP Administration => Integration Service => Integration Administration). Login with userid B1iadmin and the correct password.
    2. Check, under the SLD (System Landscape Directory), the right configuration of WSforMobile under B1i SErver. I set this environment like:
      1. WSAN
        • destProtocol => http
        • destHost => SAP B1 SERVER NAME
        • destPort => 8080
        • authentication => basic
        • user => B1i
        • Password => B1i Password
      1. WSAS
        • destProtocol => http
        • destHost => SAP B1 SERVER NAME
        • destPort => 8080
        • authentication => basic
        • user => B1i
        • Password => B1i Password
      1. WSAO
        • All Empty
      1. WSAR
        • associatedSrvIP => SAP B1 SERVER NAME
        • I left all the rest empty. If test connection (WSAN and WSAS) return Success Message, you are right.
    3. Check what port number you are running on. From the integration framework, goto Maintenance => CfgRuntime. Here you can see the port setting for
      • B1i HTTP Port (8080)
      • B1i HTTPS port (8443)
      • B1iServer (SBO SERVER NAME)
    4. Then… from integration Framework, goto Scenarios => Authentication. In the select box User Def. Author. Identifier, select sap.B1Mobile. Be sure that in Enforce Secure Transport => True
  2. SAP BUSINESS ONE CONFIGURATION
    1. Ok.. Now we can check some settings inside SAP BUSINESS ONE Application. From Administration => Setup => General => Users select the users who requires acces through IPAD and :
      1. Ensure that the “Mobile User” are checked.
      2. In mobile phone, insert the mobile phone number of the user ( if iPad, insert a fac-simile number). We use the international mobile phone number +39 335 xxxxxxx.
      3. In mobile Device Id you can put the wifi mac-address (in format xx:xx:xx:xx) of the iPAD, if your app version is 1.6.0 or higher. Otherways, you must put in this file the iPad UID ( you can retrieve this from itunes…)
  3. IPAD APP CONFIGURATION (inside your LAN )
    1. we must configure the iPad app in the right way. I do it in this way:
      • Server => SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443 (Eg: 10.1.1.25:8443). this is your LAN server IPADDRESS….
      • SSL => On
      • DB COMPANY => Your CompanyDb Name
      • User => The user name in Sap Business One (previous point 2.1.1)
      • Phone Number => (previous point 2.1.2)
      • Demo System => OFF
      • EULA => OFF

Ok.. with this settings, we are able to connect from iPAD App.

If you need to connect with your iPAD from outside your LAN, weel you need to configure your LAN (firewall, router or other) to achieve your goal.

Following, what i do in my LAN architecture…

We have a domain name registerd with register.it, and we have some PUBLIC STATIC IP from our Internet Service Provider (ISP). So, i created in register DNS a record (type A) like ipadb1.ourdomain.com => A => our PUBLIC STATIC IP (Eg: 80.20.10.50)

In iPad app configuration, i change the Server from SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443 to ipadb1.ourdomain.com:8443.

Then i create a firewall rules to nat all incoming traffic from 80.20.10.50:8443 to our SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443.

The rules in IPTABLES is like:

ipatles -t nat -A PREROUTING -p tcp -m tcp -d 80.20.10.20 –dport 8443 -j DNAT –to-destination SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443..

And that’s all ….

The iPad connects to sap both within our LAN or via the sim card, or via wireless connections outside our lan.

I hope that this small and simple guide can help someone in the configuration, saving time and some …. time.

Sorry for my english.. I know it’s not good…

To report this post you need to login first.

43 Comments

You must be Logged on to comment or reply to a post.

    1. Gianluca Calloni Post author

      Hi Jaheer Ussain..

      Thank’s for your comment.

      For the DNS record, yopu must set it in webstie (or service..) where you have regiostered your domain (*.ourdomain.com).

      Fro the DNS panel, you can choos something like “MANAGE DNS RECORD” and then add a Tyoe “A” record..

      Have a  nice day..

      (0) 
        1. Gianluca Calloni Post author

          Hi Jaheer..

          I’m not an expert on MS Windows Firewall.. Personally we use a linux distribution as a firewall.

          What version of MS Windows do you use? Or… Alternivatelly… what router brand/model??

          (0) 
    2. Gianluca Calloni Post author

      Hi Jaheer.. unfortunately i don’t know the SONICFIREWALL software. I never use it.. But.. If you are able to set up the firewall’s rule, you only must set a rule to nat all incoming traffic on YOUR_PUBLIC_IP:8443 to YOUR_SAP_B1_SERVER_IP:8443.

      This is what i do and work fine…

      But i do it on a linux server.. and as i wrote in the blog post, the command to do this is :

      ipatles -t nat -A PREROUTING -p tcp -m tcp -d 80.20.10.20 –dport 8443 -j DNAT –to-destination SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443

      I hope this can help

      Have a nice day…

      (0) 
  1. Ana Pascual

    Hi Sir Calloni?

    How to configure the outside connection? I followed all the configuration in local network and it’s working! But my problem is the external connection.

    Thanks in advance.

    (0) 
    1. Gianluca Calloni Post author

      Good morning dear Ana.

      Well.. If your IPAD work from local lan, your problem is to configure in the right way your modem and /or router and/or firewall to permit the external connection to your SAP b1 server.

      To do so, it depend on how is your lan hardware and software configuration.

      Basically… you need:

      1. a static ip address, provided from your I.S.P. e.g. 80.20.10.50
      2. to set a DNS A rules (provided from your domain mantainer) e.g. ipad.yourdomain.com A static ip address => ipad.yourdomain.com A 80.20.10.50
      3. a rule in your modem and/or router and/or firewall to NAT all incoming traffic on ipad.yourdomain.com:8443 to your SAPB1_SERVER_LOCAL_IP_ADDRESS:8443

      For the last point, it depends on if you use only a simple modem/router  for internet connection, or if you have a real firewall (hardware or software) between your modem / router and your local lan.

      As i can see from your post to my “status” it seems you have only a modem/router connected to a computer where (i suppose) there is the SAPB1 server installation.

      If is your situation you must set your modem/router to nat all incoming traffic (point 3).

      And you also must set your computer (firewall) to accept incoming connection on port 8443.. But if iPad work in local lan … probably you settings are already correct

      (0) 
      1. Ana Pascual

        Hi Sir Calloni,

        Thank you for the information above. By they way, my connection is just simple.

        1. Modem – ISP (1st ISP)

        2. Router – with wi-fi

        3. Laptop – wifi ready- serve as my Server (for testing only)

        4. ipad – (Connected to another ISP through Wifi)

        What I did is I disable the windows firewall on my laptop, I port forward the port 8443.

        I change my ipad IP into PUBLIC_IP:8443. EXAMPLE: 122.xx.xx.xx:8443. I got my public IP in this site http://www.whatismyip.com.

        Is it possible to connect ipad in a dynamic public IP? This is only for testing.

        Regarding on your information above:

        1. a static ip address, provided from your I.S.P. e.g. 80.20.10.50
        •      is it possible to run mobile apps for testing only if we have dynamic public IP?


        2. to set a DNS A rules (provided from your domain mantainer) e.g. ipad.yourdomain.com A static ip address => ipad.yourdomain.com A 80.20.10.50

        • where to setup this?What do you mean by this? Can you please give me a step by step procedure for this?

        3. a rule in your modem and/or router and/or firewall to NAT all incoming traffic onipad.yourdomain.com:8443 to your SAPB1_SERVER_LOCAL_IP_ADDRESS:8443

        • where can i find the NAT?
        • what are those rules?

        Thank you in advance.

        Regards,

        Ana

        (0) 
        1. Gianluca Calloni Post author

          Hi Ana. I replay point to point from the above post…

          1. is not possbile to run mobile apps with a dynamic IP. This because, when you are out from you local lan, you need to connect to a IP address which is the “external” address of your router and is different from the IP that you have in your local lan. More, the mobile apps work fine when you use a name instead of a ip address (E.g. ipad.toyourdomain.com)
          2. to do this, you need:
            1. a static ip address provided from your ISP e.g. 80.10.20.30
            2. a DNS rules to set ipad.toyourdomain.com = 80.10.20.30
            3. so, when you connect to ipad.toyourdomain.com:8443 it means that you are connecting to 80.10.20.30:8443
            4. To set a DNS rules you need to have access to a control panel of your domain mantainer (E.g. in Italy is aruba.it, register.it, nic.it etc etc) if you have it…
          3. The NAT… well.. the NAT configuration depends on your modem/router brand and model. practically, there should be in the configuration panel of the modem / router a feature called NAT or Firewall; from this area you must configure NAT for incoming connections on port 8443 and redirect those connections on the address of your SAP DB server on port 8443

          You could try to send the brand and model of your modem/router and i could try to help you to configure it,  but you need a static IP address to do this…

          (0) 
      2. Ana Pascual

        Hi Sir Calloni,

        I switch my connection into simple. Hope you can figure out why i can’t still log-on. I connected my server directly on my modem through UTP cable. First, i disable  the firewall in my modem, disable windows firewall, port forward port 3389 RDP and 8443 for SAP. I was able to connect my workstation on my server using RDP. But i was not able to connect on my SAP Business One apps on my server. I got the error below.

        “Connection Failed” The request timed out. (-1001)”

        I was successfully configured the SAP Business one apps locally and i can log-on to SAP Business One.

        Note: RDP is running properly. I configured RDP on my server to test if i can connect externally. But i failed on SAP Business One Apps.

        Hope you can help my find another way. By the way, i don’t have a domain base on what you’ve stated above.

        Thank you in advance.

        Regards,

        Ana

        (0) 
        1. Gianluca Calloni Post author

          Excuse me Ana.. Explain me better..

          You are able to make a RDP connection to your server from out of your local lan (E.g. with a sim connection or a public wifi connection)??

          (0) 
              1. Ana Pascual

                Hi Sarah,

                Below were the troubleshooting steps that i’ve done.

                1. Test the Mobility if it runs locally (LAN)

                2. If you were able to run it successfully, test if the outside connection is possible on your server through testing it’s RDP (Outside the Local connection-meaning you are using other ISP when connection 1 pc to your server)

                3. If RDP is possible, now test your IPAD connection.

                4. Make sure that you open the port 1433 on router’s firewall.

                5. Follow the INTEGRATION FRAMEWORK SETTINGS, SAP BUSINESS ONE CONFIGURATION,

                IPAD APP CONFIGURATION posted above by Sir Calloni.

                6. Note: on IPAD configuration make sure to change the local IP to Public IP of the server.

                Thant’s all.

                Thank you,

                Regards,

                Ana

                (0) 
  2. Ana Pascual

    Hi Sir Calloni,

    May i know if the SAP Business One mobility runs on SAP Business One on Cloud/onDemand? Do you have documentation for this?

    I really need your help.

    Thank you in advance.

    Ana

    (0) 
    1. Gianluca Calloni Post author

      Dear Ana…

      I’m sorry.. But I never used SAP B1 on Cloud or on Demand.. And i don’t have any documentation about this.. I’m not a SAP partner and /or expert.. I’m only a SYSTEM ADMIN using sap in my company…

      I think someone else (like a SAP Partner) who is reading this forum can have documentation or information about your question..

      BTW.. I think (i’m not sure) the only difference is in configuration of SLD (System Landscape Directory) which is not in your physical server but in a cloud server… But is only an idea…

      Have a nice day

      (0) 
      1. Ana Pascual

        Thank you Sir. I already posted in SAP Mobile forum but nobody wants to answer my post but it was viewed many times 🙁 .

        Thank you once again.

        Ana

        (0) 
    1. Gianluca Calloni Post author

      Hi Frank.

      Thank’s for suggestion..

      The post is a cup of year old.. And in the first release of integration framework i must to configure WSAN and WSAS also..

      Have a nice day

      (0) 
    1. Gianluca Calloni Post author

      Hi Jonathan.

      Yes the setup is the same for android version.

      Take note that now with sap 9.0 PL 14 (my actual release) the SLD is autosetup.

      So you don’t have to do some configuration by hand as i post some year ago.

      Bu tyou must have a Secure certificate in your server to use the mob app from android / ios.

      Have a nice day

      (0) 
  3. Teng Pereras

    Hi all,

    I’m experiencing the similar issue.

    My concern is that when using my android device I can connect both private and public from our SAP mobile app to our SAP server.

    But when using our iPad device, I can connect only through private connection but not through public connection.

    A security error always pop-up saying that my certificate was not issued by a trusted certificate authority…

    I’m confused because I can use this certificate on my ipad on private connection and using this very same certificate on our android device and I can connect on both private and public connection.

    I’m running SAP Business One Version 9.1 Pl 5 on an SQL 2012 server.

    Latest SAP version on Android and IOS app.

    Thanks!

    (0) 
    1. Sarah Jackson

      Hello,

      Sounds like an issue with the SSL certificate. I would be inclined to check you have all appropriate levels within the generated certificate from your third party certificate generator.

      Thanks

      Sarah

      (0) 
      1. Teng Pereras

        Thanks Ms. Sarah but I followed the steps from the SAP Note 2019275 about setting up a valid certificate for SAP Business One mobile application. Thanks again!

        (0) 
  4. Michele Balocchi

    Ciao Gianluca,

    I’ve installed on my iPhone 4 (ver. 7.1.2) the SAP B1 Application v. 1.11.1.

    I’ve also generated, accortding to SAP Note 2019275 a certificate in order to be able to connect myself with my Business One server.

    I’ve also installed on my server the B1i Integration Framework, however, every time that I attempt to login on the SAP B1 mobile application I get an error, with code -1004. Unable to connect.

    I’m a little desperate: I’m not able too see any possibility of success with the documentation that I find on the internet.

    Can you help me?

    (0) 
    1. Gianluca Calloni Post author

      Ciao Michele…

      Your issue could be generated from an incorrect LAN configuration.

      Unfortunately in the SAP documents and / or notes there is no indication about your error code 1004.

      What about your IT structure? E.g. WINDOWS server Operating system?? firewall?? lan / wan connection…??

      P.s. If you want we can place a call.. it could be easier insted the forum in english languages

      (0) 
  5. Michele Balocchi

    The server that I use for the installation is a VM on VirtualBox for testing and development.

    I use Windows 7 x86 with SAP Business One 9.1 PL06 and I’ve turn off windows firewall on the VM.

    Ps. A call will be a good idea!

    (0) 
  6. Joel Maturrano

    Hi expert,

    Im trying to configure my android device following your steps, but i don’t know how to get the information that i need to put in this part. Could you please help me?

    1. PAD APP CONFIGURATION (inside your LAN )
      1. we must configure the iPad app in the right way. I do it in this way:
      • Server => SAP_BUSINESS_ONE_SERVER_IP_ADDRESS:8443 (Eg: 10.1.1.25:8443). this is your LAN server IPADDRESS….

      I don’t know how to get the information to send in server. Please your help!

      (0) 
      1. Gianluca Calloni Post author

        Hi Joel.

        As Peter Hartwich write in the top of this page, this post is 4 year old. Some configuration is changed in the last SAP B1 Version / PL.

        Anyway, about your question, on the Android Mobile App, you must insert the ip addres of your SAP B1 Server ( on which the Integration service is installed).

        You could use both the IP address o computer name, but must use the 8443 port (ssl connection).

        If yopu try to connect from inside your LAN, you can use the internal ip address/computer name of the SAP B1 server.

        If you are uotside of your LAN , it could be a little bit more complicated, cause you need a static ip address pointing to your organization or SAP B1 server and you must configure your NAT / FIREWALL to redirect connection to this server.

        I think you can find more indication in official SAP documentation.

        Have a nice day

        LUCA

        (0) 
        1. Joel Maturrano

          Hi Luca,

          I have tried to connect to Sap business one android using my Computer name and also using mi ip address without success. I need to connect SBO to my android device. Could you please help me? please let me here your skype or mail. Thanks in advance!!.

          (0) 
          1. Sarah Jackson

            Hello Joel,

            If your SSL certificate has been correctly setup either using the key pairing route in the SAP Note for this or from IIS and you have ensured all your intermedieries have been imported too. You would be as well to have your IT company create a DNS record. For example: sapb1mobile.<<COMPANYNAME>>.com – this would then be the name you populate within your SAP B1 mobile app. This will then allow for a connection both internally over wireless or externally via both wireless/cellular data.

            Thanks.

            (0) 
            1. Georges Ostiguy

              I’ve had setup this successfully but then starting mid last summer the app was upgraded to require ssl certificates

              Now with current app , get certificate error

              Could you point me to procedure to correctly obtain and install certificate so I can stop using my very old version of the app and can use current version

              Thanks

              Georges

              gostiguy@nwaretech.com

              (0) 

    Comments are closed.