IT architecture overview for on-prem clients
On-premises applications (SAP, Oracle, etc.) are often locked behind corporate firewalls, making them inaccessible to cloud platforms. The On-Premise Client (OPC) acts as a secure bridge, allowing the Celonis Platform to execute actions or extract data without requiring you to open incoming ports in your firewall.
OPC capabilities and use cases
The On-Premise Client (OPC) serves as the functional engine for two primary workflows: data acquisition and process automation.
Data extraction (Inbound to Celonis)
The OPC facilitates the secure transfer of raw data from your local environment to the Celonis Cloud.
SAP ECC and S/4HANA: Optimized specifically for SAP environments to pull tables and metadata. For further details about extraction from SAP, please refer to SAP ECC and S/4HANA data extraction overview
Custom Data Sources: For non-standard systems, the OPC supports custom configurations to reach legacy databases.
Action and write-back (Outbound to On-Prem)
Beyond just reading data, the OPC allows the Celonis Platform to "push" instructions back into your local systems to automate tasks.
Write-Back: Update records, clear invoices, or change master data in your ERP directly from a Celonis Action Flow.
Generic HTTP App: Use the HTTP on-prem application to connect to any local tool that provides a REST API or web service, extending Celonis to virtually any software in your stack.
Deep-dive IT architecture for on-premise connection
The following diagrams illustrate the architectural relationship between your local environment and the Celonis Platform.
The first image defines the System Landscape, showing how the OPC bridges the gap to various on-premise applications.

The second image details the Logical Communication Flow, highlighting the outbound-only polling mechanism that maintains your firewall integrity.
