Our client’s SAP system is integrated with TechOMS to send Purchase Orders and Sales Orders via the Swagger API, and they have configured Webhooks following the standard setup instructions.

While Sales Orders and Purchase Orders posted to Swagger successfully flow into our Excalibur WMS, the outbound Webhook alerts back to SAP are failing.

The Issue: SAP standard security requires the sender (TechOMS) to fetch a CSRF token via a GET request prior to making a POST call. Because TechOMS is attempting to POST the webhook alert without fetching this authentication token first, the calls are blocked by SAP.

Proposed Options: The client has asked if TechOMS can support either of the following approaches:

1. Fetch Token First: Have TechOMS execute a GET request to retrieve the CSRF authentication token before executing the status POST to SAP.

2. GET Trigger: Have TechOMS send a GET request containing the order number so the client's SAP system can pull the updated order details directly from TechOMS.

Trying to get an estimate of the effort with either of these workarounds.

Has another SAP-integrated client implemented a similar solution with TechOMS?