Installing on-prem clients
The Celonis On-Prem Clients (OPC) act as a secure gateway, allowing the Celonis Platform to access authorized local data sources without requiring you to open incoming ports in your corporate firewall.
Because this setup requires both platform configuration and local server access, the installation is a collaborative effort between the Celonis Team Admin and your IT Infrastructure Admin. Follow the three-stage workflow below to prepare your package, deploy the client, and verify the data connection.
Important
If your SAP system uses Process Integration/Process Orchestration, or if you use SAP 4.6C or older, you must install your SAP Extractor client using the uplink integration. See Local extraction.
Understanding the OPC deployment workflow
This diagram illustrates a secure "Inside-Out" connection strategy. Unlike traditional setups, the Celonis Platform never reaches into your network; instead, the On-Prem Client reaches out to Celonis.
 |
Stage 1: Package Preparation (Celonis Admin): The process begins in the Celonis Platform. The Admin creates a unique connection set and downloads a configuration package. This package contains the "identity" the client will use to authenticate with your specific Celonis team.
Stage 2: Installation & Local Hand-off (IT Admin): The configuration package is handed off to the IT Infrastructure Admin, who installs the OPC agent on a local server (Windows, Linux, or Mac). During this stage, the agent is pointed toward the local data sources (like an SAP ERP or SQL database) that need to be reached.
Stage 3: Secure Uplink & Verification (End-to-End): Once the service starts, the OPC establishes an encrypted outbound connection to the Verification URL. The status in the Celonis Platform will switch to "Connected," signaling that data is now ready to be extracted and transformed without any changes to your corporate firewall rules.
Installing the on-prem client
Where would you like to install your on-prem clients?