Building Secure Sync Adapters with Pantheon ERP

Real-Time API Sync

A technical guide to configuring background sync services in Spring Boot to pull timesheets and invoice details into Pantheon ERP database tables safely. Integrating modern web applications with legacy ERP systems is a common challenge we face at Sophia Software.

The Pantheon ERP Challenge

Pantheon is a powerful ERP used widely in our region, but its architecture is fundamentally different from modern RESTful microservices. Direct database access is often required, which poses significant security and data integrity risks. You cannot simply expose the ERP database to the public internet.

Our Sync Adapter Architecture

To bridge the gap between our cloud-based PWAs and on-premise Pantheon installations, we build secure, dedicated sync adapters using Spring Boot. This adapter sits securely within the client's local network (or a secure VPN tunnel) and acts as the sole intermediary.

The architecture looks like this:

  • Cloud App: The PWA and its backend API manage user interactions and temporary data storage.
  • Message Broker: Approved timesheets and invoices are placed into a secure message queue.
  • Sync Adapter (Spring Boot): The local adapter long-polls or subscribes to the message broker. When it receives a payload, it validates the data against Pantheon's strict business rules.
  • Database Execution: Only after rigorous validation does the adapter execute the stored procedures or direct inserts required to update the Pantheon MS SQL database.

Security and Transactions

Security is paramount. The sync adapter authenticates using mutual TLS and never exposes any inbound ports to the internet. Furthermore, all database operations are wrapped in strict transactions. If an invoice insertion fails halfway through, the entire transaction is rolled back, preventing orphaned records and ensuring the ERP's financial integrity remains pristine.

Conclusion

Building adapters for legacy ERPs requires a deep understanding of both modern cloud architectures and traditional relational database constraints. Our Spring Boot sync adapters ensure that data flows smoothly and securely, enabling digital transformation without compromising the core business system.