Premium VMS Architecture

Commercial Enterprise Vendor Journey

1

Web Access

Traffic is scrubbed by Akamai App & API Protector and routed to our VMware ESXi cluster.

HTTPS
2

Authentication

Okta Identity Cloud verifies enterprise SSO, 2FA, and robust access policies.

SAML/OIDC
3

Application Core

Red Hat OpenShift handles logic. Files save to NetApp StorageGRID, data to Oracle DB.

4

Firewall Routing

App data is strictly filtered and encrypted by Palo Alto Networks NGFW for transport.

IPsec Tunnel
5

Client SAP (On-Prem)

Data arrives securely inside the Client's internal CPI Middleware via VPN.

Phase 1: Enterprise IAM Security

Leveraging Premium SaaS Identity & Access Management

Vendor

Web Browser

Access
VMware

F5 BIG-IP

ADC Proxy

Redirect
SaaS

Okta

Identity Provider

Verify Policy
Cloud

Okta Directory

Universal Auth DB

Phase 2: Premium Data Processing

Deploying enterprise-grade API routing and commercial storage solutions

Vendor UI

Uploads PDF

POST Request
VMware

MuleSoft

Anypoint API

Approved
OpenShift

Enterprise App

Java / Spring

Save File
Appliance

NetApp

StorageGRID

Save DB
Exadata

Oracle DB

19c Enterprise

Phase 3: Secure Network Integration

Bridging the gap between our VMware Infrastructure and your SAP Network

OpenShift

App Engine

Generates PO

Trigger

Palo Alto

Next-Gen Firewall

IPsec VPN Tunnel

Client Firewall

Accepts Tunnel

Internal Route

SAP CPI

Middleware

Slide 1 of 4