SlideShare una empresa de Scribd logo
1 de 42
Descargar para leer sin conexión
API and SOA : Two sides of the
same coin?

Alistair Farquharson
CTO, SOA Software
Sachin Agarwal, VP Product Marketing
SOA Software

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Speakers

Alistair Farquharson
CTO
SOA Software

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Sachin Agarwal
VP, Prod. Marketing
SOA Software
API and SOA Resources

• Resource Center
– http://resource.soa.com/

• Webinar Recording
– http://resource.soa.com/resource/webinars

• Follow us on:
www.facebook.com/soasoftware
www.linkedin.com/company/soasoftware

@soasoftwareinc

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
SOA

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Key to Adoption

• Two keys:
– Interestingly it started off similarly to APIs – with the promise of new
revenue and the IoT was on the tip of everyone’s tongues.
– The fact is that, five/ten years ago the demand for IoT and Mobile was
almost non-existent compared to today.
– SOA turned inward, even though that was not the original goal

necessarily
– The promise of re-use drives businesses to a service orientation
– Standards adoption

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Limitations

• It’s a complex world with complex issues and it requires support and
skills to do correctly. To do SOA right, you need the company behind
you, but there are massive payoffs and incredible success stories
• Since SOA became an integration technology, it had to become
sophisticated (I use that term on purpose)
– Security (WS-S*)
– Transactionality (WS-*)
– Multi-protocol

• The timelines associated with an ROI are long, simply because

projects are long and organizations are large
• A pragmatic reason: readability:
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Common Components

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
SOA

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Example - The SOA Catalog

• SOA was initially focused on UDDI, WSDL and SOAP.
• The idea was that the UDDI standard would provide a consistent way
to discover services and associated metadata.
• As a sign of things to come, the UDDI standard, while ratified, lost
support. I believe that this was due to:
– Inflexibility
– Human readability

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
UDDI - Technical and Inhuman(e)

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Repository

• Over time, the UDDI Registry has been replaced by the Repository
• Repositories are more flexible, typically template and workflow driven
• Repositories are focused on the development lifecycle
• Their goal is to guide development activities and provide visibility and
accountability in the SDLC process
• Now we are seeing API developer portals emerge to complement
internal repositories

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
SOA

SOA, in its focus on machine to machine integration and

standardization, has, in the past, forgotten about the human
in the equation.

This is changing.

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
API

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Why APIs?

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The API Portal

• The API Catalog approaches the problem from a completely different
direction based on its origins
– Consumer-facing
– Mobile/Web App consumer

• APIs continue the trend of human to human, rather than machine to
machine, interaction
• The developer is now the customer, rather than a participant
– A lack of enthusiasm for standards has forced a document-centric
approach, which is better for humans anyway

– The need for channel marketing has driven a portal design
– The need for developer engagement has improved utility

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Different Roles

Repository
•
•
•
•

API Portal
•
•
•
•

Production
SDLC
Security
Inside

Both are required
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Consumption
Promotion/Support
Provisioning
Outside
The Need for Both

Production
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Consumption
Unified API Platform

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The relationship between APIs and SOA

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
• API initiatives are the lucky ones:
– Business funding
– Green field
– Shifted center of gravity

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Common Misconceptions

• APIs and Web Services are distinguished by the technology they use,
JSON vs. SOAP
• APIs have become the external interface to an organization while
Web Services have become components for internal collaborations

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
What is an API

• Has become a broader term than web service, it is not exclusive to
JSON/HTTP as some may lead us to believe
• Can utilize different data formats such as XML, SOAP, JSON, or plain
text
• Can utilize different transports such as WebSockets, HTTP, TCP,
MLLP, JMS, or MQ
• Does not exclude Web Services, SOAP, XML, JMS

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Differentiating through Exposure

• The choice of technology should be dictated by the client:
– Web/JavaScript – JSON/HTTP, WebSockets
– Mobile – JSON/HTTP
– Java A2A – XML over the most relevant protocol

• You may need to expose multiple types depending on the channel

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Simplifying the Landscape

• APIs are a superset of Web Services – it is a business differentiation,
not a technical one
– Business, product focus
– Shifted center of gravity

• You need a single platform that is flexible enough to handle multiple:
– Transports and Protocols
– Message types
– Descriptors and Documentation Standards

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Sample Topology

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
What’s wrong with the API platform?

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Wire Protocol

• APIs are typically JSON/REST
– Web/Mobile

• Web Services are typically XML/SOAP
– A2A Integration

• Management platforms need to cater to both. Typically, however, they
focus on one to the detriment of the other.

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Need for Both

• Depending on the consumer, APIs may need to be SOAP as well as
JSON/REST
• APIs regularly leverage backend SOAP services within an
organization
• The management platform therefore needs to:
•

Understand both APIs and Services

•

Mediate between SOAP/XML and
JSON/REST

•

Understand the dependencies
between APIs and Services to
facilitate change management, root
cause alaysis etc.

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Descriptor

• API developers ideally write detailed documentation, with samples
messages and code to communicate API details.
– Pro : Human readable
– Con : Change management is subjective

• Web Services primarily use WSDL and WS-Policy
– Pro : Change management is explicit
– Con : Difficult to understand

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Need for Both

• Effective change management and version control demands that the
API and Web Service are formally described in some way
– WSDL
– Swagger
– WADL

• The side benefits of this are:
– Document generation
– Code generation

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Security

• APIs typically leverage OAuth or HTTP request signing mechanisms
for security
– Transport-based (HTTP)
– Device capable

• SOA leverages WS-S, SAML, WS-Trust, etc
– Message-based
– XML

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Need for Both

• Security mediation between web standards and WS-* standards is
critical
• A deep understanding of the different standards and policies is
required, including:
– OAuth 1.0a/2.0
– Header-based signature mechanisms
– SAML
– WS-Security
– XACML

• Token and identity mediation is
critical
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Summary

SOA, in its focus on machine to machine integration and

standardization, forgot about the human in the equation.

APIs, in their focus on ease of use, have forgotten about
management and control.

You need both

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Successful APIs

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Key Components

There are three key components to making an API effort successful in
the long term.

 Design
 Implementation
 Program Management

All of these require a comprehensive platform

35
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
APIs are tip of the Iceberg!

Drive
Accelerate

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Monetize
Analyze
What does a Management Platform Provide

Business
Foundation/
Functional
Tier
Service Arch.
Lifecycle
Data arch.

NonFunctional
Tier

Security,
Mediation,
QoS, Analytics

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Protocol
Tier

Publishing,
Oauth, etc.
Business Foundation/Functional Tier

• Service Rationalization, Reuse
• Lifecycle Management
• Change Management
• Impact Analysis

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Non-Functional Tier

• Security
– Integration with Enterprise SSO/LDAP
– Message Security/Encryption
– Threat Protection

• Orchestration
• Monitoring
– Rate limiting
– QoS
– SLA

• Analytics

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Protocol Tier

• SOAP
• JSON
• etc

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
The Unified SOA & API Platform

Analytics
Developer
Engagement
Gateway Services
Service Integration
Lifecycle
Management
Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
API and SOA Resources

• Resource Center
– http://resource.soa.com/

• Webinar Recording
– http://resource.soa.com/resource/webinars

• Follow us on:
www.facebook.com/soasoftware
www.linkedin.com/company/soasoftware

@soasoftwareinc

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.

Más contenido relacionado

La actualidad más candente

Delivering on Personalization with the Power of APIs
Delivering on Personalization with the Power of APIsDelivering on Personalization with the Power of APIs
Delivering on Personalization with the Power of APIsAkana
 
Is it time for a Connector-less Approach to Cloud Integration?
Is it time for a Connector-less Approach to Cloud Integration? Is it time for a Connector-less Approach to Cloud Integration?
Is it time for a Connector-less Approach to Cloud Integration? Akana
 
Driving Digital Innovation with a Layered API Design Approach
Driving Digital Innovation with a Layered API Design ApproachDriving Digital Innovation with a Layered API Design Approach
Driving Digital Innovation with a Layered API Design ApproachAkana
 
Realizing SOA and API Convergence
Realizing SOA and API ConvergenceRealizing SOA and API Convergence
Realizing SOA and API ConvergenceAkana
 
API and SOA: Two Sides of the Same Coin?
API and SOA: Two Sides of the Same Coin?API and SOA: Two Sides of the Same Coin?
API and SOA: Two Sides of the Same Coin?Akana
 
Are APIs and SOA Converging?
Are APIs and SOA Converging?Are APIs and SOA Converging?
Are APIs and SOA Converging?Akana
 
Platform for Secure Digital Business
Platform for Secure Digital BusinessPlatform for Secure Digital Business
Platform for Secure Digital BusinessAkana
 
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...apidays
 
Criticality of identity
Criticality of identityCriticality of identity
Criticality of identityNordic APIs
 
Managing Sensitive Information in an API and Microservices World
Managing Sensitive Information in an API and Microservices WorldManaging Sensitive Information in an API and Microservices World
Managing Sensitive Information in an API and Microservices WorldApigee | Google Cloud
 
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...apidays
 
SSO Agility Made Possible - November 2014
SSO Agility Made Possible  -  November 2014SSO Agility Made Possible  -  November 2014
SSO Agility Made Possible - November 2014Andrew Ames
 
API Frenzy: The Implications and Planning for a Successful API Strategy
API Frenzy: The Implications and Planning for a Successful API StrategyAPI Frenzy: The Implications and Planning for a Successful API Strategy
API Frenzy: The Implications and Planning for a Successful API StrategyAkana
 
SaaS Metrics That Matter | MuleSoft
SaaS Metrics That Matter | MuleSoftSaaS Metrics That Matter | MuleSoft
SaaS Metrics That Matter | MuleSoftMuleSoft
 
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...apidays LIVE New York 2021 - Reaching common agreement on standards by David ...
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...apidays
 
API Management in Digital Transformation
API Management in Digital TransformationAPI Management in Digital Transformation
API Management in Digital TransformationAditya Thatte
 
Melbourne API Management Seminar
Melbourne API Management SeminarMelbourne API Management Seminar
Melbourne API Management SeminarCA API Management
 
Enabling the Multi-Device Universe
Enabling the Multi-Device UniverseEnabling the Multi-Device Universe
Enabling the Multi-Device UniverseCA API Management
 

La actualidad más candente (18)

Delivering on Personalization with the Power of APIs
Delivering on Personalization with the Power of APIsDelivering on Personalization with the Power of APIs
Delivering on Personalization with the Power of APIs
 
Is it time for a Connector-less Approach to Cloud Integration?
Is it time for a Connector-less Approach to Cloud Integration? Is it time for a Connector-less Approach to Cloud Integration?
Is it time for a Connector-less Approach to Cloud Integration?
 
Driving Digital Innovation with a Layered API Design Approach
Driving Digital Innovation with a Layered API Design ApproachDriving Digital Innovation with a Layered API Design Approach
Driving Digital Innovation with a Layered API Design Approach
 
Realizing SOA and API Convergence
Realizing SOA and API ConvergenceRealizing SOA and API Convergence
Realizing SOA and API Convergence
 
API and SOA: Two Sides of the Same Coin?
API and SOA: Two Sides of the Same Coin?API and SOA: Two Sides of the Same Coin?
API and SOA: Two Sides of the Same Coin?
 
Are APIs and SOA Converging?
Are APIs and SOA Converging?Are APIs and SOA Converging?
Are APIs and SOA Converging?
 
Platform for Secure Digital Business
Platform for Secure Digital BusinessPlatform for Secure Digital Business
Platform for Secure Digital Business
 
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...
apidays LIVE LONDON - Reference Architecture as Code (RaaC): A Framework to A...
 
Criticality of identity
Criticality of identityCriticality of identity
Criticality of identity
 
Managing Sensitive Information in an API and Microservices World
Managing Sensitive Information in an API and Microservices WorldManaging Sensitive Information in an API and Microservices World
Managing Sensitive Information in an API and Microservices World
 
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...
apidays LIVE New York 2021 - API Automation For DevOps at Scale by Rod Cope, ...
 
SSO Agility Made Possible - November 2014
SSO Agility Made Possible  -  November 2014SSO Agility Made Possible  -  November 2014
SSO Agility Made Possible - November 2014
 
API Frenzy: The Implications and Planning for a Successful API Strategy
API Frenzy: The Implications and Planning for a Successful API StrategyAPI Frenzy: The Implications and Planning for a Successful API Strategy
API Frenzy: The Implications and Planning for a Successful API Strategy
 
SaaS Metrics That Matter | MuleSoft
SaaS Metrics That Matter | MuleSoftSaaS Metrics That Matter | MuleSoft
SaaS Metrics That Matter | MuleSoft
 
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...apidays LIVE New York 2021 - Reaching common agreement on standards by David ...
apidays LIVE New York 2021 - Reaching common agreement on standards by David ...
 
API Management in Digital Transformation
API Management in Digital TransformationAPI Management in Digital Transformation
API Management in Digital Transformation
 
Melbourne API Management Seminar
Melbourne API Management SeminarMelbourne API Management Seminar
Melbourne API Management Seminar
 
Enabling the Multi-Device Universe
Enabling the Multi-Device UniverseEnabling the Multi-Device Universe
Enabling the Multi-Device Universe
 

Destacado

Mobile and Video (Beyond Hmmm...that sounds cool)
Mobile and Video (Beyond Hmmm...that sounds cool)Mobile and Video (Beyond Hmmm...that sounds cool)
Mobile and Video (Beyond Hmmm...that sounds cool)Jason Thibeault
 
Are APIs and SOA Converging
Are APIs and SOA ConvergingAre APIs and SOA Converging
Are APIs and SOA ConvergingSachin Agarwal
 
A Peek into the Future of Mobile Enabled Healthcare
A Peek into the Future of Mobile Enabled HealthcareA Peek into the Future of Mobile Enabled Healthcare
A Peek into the Future of Mobile Enabled HealthcareSachin Agarwal
 
Psychological demands of technology, or how your product is killing my self-e...
Psychological demands of technology, or how your product is killing my self-e...Psychological demands of technology, or how your product is killing my self-e...
Psychological demands of technology, or how your product is killing my self-e...Aneel Lakhani
 

Destacado (6)

Mobile and Video (Beyond Hmmm...that sounds cool)
Mobile and Video (Beyond Hmmm...that sounds cool)Mobile and Video (Beyond Hmmm...that sounds cool)
Mobile and Video (Beyond Hmmm...that sounds cool)
 
Are APIs and SOA Converging
Are APIs and SOA ConvergingAre APIs and SOA Converging
Are APIs and SOA Converging
 
Understanding Context
Understanding ContextUnderstanding Context
Understanding Context
 
Cloud Perspectives
Cloud PerspectivesCloud Perspectives
Cloud Perspectives
 
A Peek into the Future of Mobile Enabled Healthcare
A Peek into the Future of Mobile Enabled HealthcareA Peek into the Future of Mobile Enabled Healthcare
A Peek into the Future of Mobile Enabled Healthcare
 
Psychological demands of technology, or how your product is killing my self-e...
Psychological demands of technology, or how your product is killing my self-e...Psychological demands of technology, or how your product is killing my self-e...
Psychological demands of technology, or how your product is killing my self-e...
 

Similar a API and SOA: Two sides of the same coin

Are APIs and SOA Converging?
Are APIs and SOA Converging?Are APIs and SOA Converging?
Are APIs and SOA Converging?Akana
 
The Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseThe Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseAkana
 
The Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseThe Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseAkana
 
Realizing SOA and API Convergence for IBM DataPower Customers
Realizing SOA and API Convergence for IBM DataPower CustomersRealizing SOA and API Convergence for IBM DataPower Customers
Realizing SOA and API Convergence for IBM DataPower CustomersAkana
 
Enterprise API Adoption Patterns
Enterprise API Adoption PatternsEnterprise API Adoption Patterns
Enterprise API Adoption PatternsAkana
 
API Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAPI Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAkana
 
API Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAPI Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAkana
 
Building A Business-Facing Mobile Developer Community
Building A Business-Facing Mobile Developer CommunityBuilding A Business-Facing Mobile Developer Community
Building A Business-Facing Mobile Developer CommunityProgrammableWeb
 
Modernizing an Existing SOA-based Architecture with APIs
Modernizing an Existing SOA-based Architecture with APIsModernizing an Existing SOA-based Architecture with APIs
Modernizing an Existing SOA-based Architecture with APIsApigee | Google Cloud
 
Api frenzy june 2013 v2
Api frenzy june 2013 v2Api frenzy june 2013 v2
Api frenzy june 2013 v2Sachin Agarwal
 
Powering Internal API Communities
Powering Internal API CommunitiesPowering Internal API Communities
Powering Internal API CommunitiesAkana
 
Powering Internal API Communities
Powering Internal API CommunitiesPowering Internal API Communities
Powering Internal API CommunitiesAkana
 
The Datacenter API
The Datacenter APIThe Datacenter API
The Datacenter APIAkana
 
Intermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoIntermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoAkana
 
Lifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APILifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APIAkana
 
Lifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APILifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APIAkana
 
The Datacenter API
The Datacenter APIThe Datacenter API
The Datacenter APIAkana
 
Intermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoIntermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoAkana
 
Eat Your Microservices Elephant One Bite at a Time
Eat Your Microservices Elephant One Bite at a TimeEat Your Microservices Elephant One Bite at a Time
Eat Your Microservices Elephant One Bite at a TimeAkana
 

Similar a API and SOA: Two sides of the same coin (20)

Are APIs and SOA Converging?
Are APIs and SOA Converging?Are APIs and SOA Converging?
Are APIs and SOA Converging?
 
The Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseThe Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the Enterprise
 
The Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the EnterpriseThe Business Value for Internal APIs in the Enterprise
The Business Value for Internal APIs in the Enterprise
 
Realizing SOA and API Convergence for IBM DataPower Customers
Realizing SOA and API Convergence for IBM DataPower CustomersRealizing SOA and API Convergence for IBM DataPower Customers
Realizing SOA and API Convergence for IBM DataPower Customers
 
Enterprise API Adoption Patterns
Enterprise API Adoption PatternsEnterprise API Adoption Patterns
Enterprise API Adoption Patterns
 
API Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAPI Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against Hacks
 
API Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against HacksAPI Security: Securing Digital Channels and Mobile Apps Against Hacks
API Security: Securing Digital Channels and Mobile Apps Against Hacks
 
Building A Business-Facing Mobile Developer Community
Building A Business-Facing Mobile Developer CommunityBuilding A Business-Facing Mobile Developer Community
Building A Business-Facing Mobile Developer Community
 
Modernizing an Existing SOA-based Architecture with APIs
Modernizing an Existing SOA-based Architecture with APIsModernizing an Existing SOA-based Architecture with APIs
Modernizing an Existing SOA-based Architecture with APIs
 
Api frenzy june 2013 v2
Api frenzy june 2013 v2Api frenzy june 2013 v2
Api frenzy june 2013 v2
 
Powering Internal API Communities
Powering Internal API CommunitiesPowering Internal API Communities
Powering Internal API Communities
 
Powering Internal API Communities
Powering Internal API CommunitiesPowering Internal API Communities
Powering Internal API Communities
 
The Datacenter API
The Datacenter APIThe Datacenter API
The Datacenter API
 
Intermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoIntermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and Demo
 
Lifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APILifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle API
 
Lifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle APILifecycle Manager and the Lifecycle API
Lifecycle Manager and the Lifecycle API
 
The Datacenter API
The Datacenter APIThe Datacenter API
The Datacenter API
 
Intermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and DemoIntermediary for Microsoft: Product Overview and Demo
Intermediary for Microsoft: Product Overview and Demo
 
SOACS-Overview.pdf
SOACS-Overview.pdfSOACS-Overview.pdf
SOACS-Overview.pdf
 
Eat Your Microservices Elephant One Bite at a Time
Eat Your Microservices Elephant One Bite at a TimeEat Your Microservices Elephant One Bite at a Time
Eat Your Microservices Elephant One Bite at a Time
 

Último

COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Websitedgelyza
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostMatt Ray
 
How Accurate are Carbon Emissions Projections?
How Accurate are Carbon Emissions Projections?How Accurate are Carbon Emissions Projections?
How Accurate are Carbon Emissions Projections?IES VE
 
UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7DianaGray10
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...DianaGray10
 
UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6DianaGray10
 
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdf
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdfIaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdf
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdfDaniel Santiago Silva Capera
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdfPedro Manuel
 
Comparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioComparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioChristian Posta
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfinfogdgmi
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding TeamAdam Moalla
 
AI Fame Rush Review – Virtual Influencer Creation In Just Minutes
AI Fame Rush Review – Virtual Influencer Creation In Just MinutesAI Fame Rush Review – Virtual Influencer Creation In Just Minutes
AI Fame Rush Review – Virtual Influencer Creation In Just MinutesMd Hossain Ali
 
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1DianaGray10
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfJamie (Taka) Wang
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.YounusS2
 
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdf
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdfUiPath Solutions Management Preview - Northern CA Chapter - March 22.pdf
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdfDianaGray10
 
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online CollaborationCOMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online Collaborationbruanjhuli
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-pyJamie (Taka) Wang
 

Último (20)

COMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a WebsiteCOMPUTER 10 Lesson 8 - Building a Website
COMPUTER 10 Lesson 8 - Building a Website
 
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCostKubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
KubeConEU24-Monitoring Kubernetes and Cloud Spend with OpenCost
 
How Accurate are Carbon Emissions Projections?
How Accurate are Carbon Emissions Projections?How Accurate are Carbon Emissions Projections?
How Accurate are Carbon Emissions Projections?
 
UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7UiPath Studio Web workshop series - Day 7
UiPath Studio Web workshop series - Day 7
 
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
Connector Corner: Extending LLM automation use cases with UiPath GenAI connec...
 
UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6UiPath Studio Web workshop series - Day 6
UiPath Studio Web workshop series - Day 6
 
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdf
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdfIaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdf
IaC & GitOps in a Nutshell - a FridayInANuthshell Episode.pdf
 
Nanopower In Semiconductor Industry.pdf
Nanopower  In Semiconductor Industry.pdfNanopower  In Semiconductor Industry.pdf
Nanopower In Semiconductor Industry.pdf
 
Comparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and IstioComparing Sidecar-less Service Mesh from Cilium and Istio
Comparing Sidecar-less Service Mesh from Cilium and Istio
 
Videogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdfVideogame localization & technology_ how to enhance the power of translation.pdf
Videogame localization & technology_ how to enhance the power of translation.pdf
 
9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team9 Steps For Building Winning Founding Team
9 Steps For Building Winning Founding Team
 
AI Fame Rush Review – Virtual Influencer Creation In Just Minutes
AI Fame Rush Review – Virtual Influencer Creation In Just MinutesAI Fame Rush Review – Virtual Influencer Creation In Just Minutes
AI Fame Rush Review – Virtual Influencer Creation In Just Minutes
 
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1UiPath Platform: The Backend Engine Powering Your Automation - Session 1
UiPath Platform: The Backend Engine Powering Your Automation - Session 1
 
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
activity_diagram_combine_v4_20190827.pdfactivity_diagram_combine_v4_20190827.pdf
 
20230104 - machine vision
20230104 - machine vision20230104 - machine vision
20230104 - machine vision
 
Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.Basic Building Blocks of Internet of Things.
Basic Building Blocks of Internet of Things.
 
20150722 - AGV
20150722 - AGV20150722 - AGV
20150722 - AGV
 
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdf
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdfUiPath Solutions Management Preview - Northern CA Chapter - March 22.pdf
UiPath Solutions Management Preview - Northern CA Chapter - March 22.pdf
 
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online CollaborationCOMPUTER 10: Lesson 7 - File Storage and Online Collaboration
COMPUTER 10: Lesson 7 - File Storage and Online Collaboration
 
20230202 - Introduction to tis-py
20230202 - Introduction to tis-py20230202 - Introduction to tis-py
20230202 - Introduction to tis-py
 

API and SOA: Two sides of the same coin

  • 1. API and SOA : Two sides of the same coin? Alistair Farquharson CTO, SOA Software Sachin Agarwal, VP Product Marketing SOA Software Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 2. Speakers Alistair Farquharson CTO SOA Software Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Sachin Agarwal VP, Prod. Marketing SOA Software
  • 3. API and SOA Resources • Resource Center – http://resource.soa.com/ • Webinar Recording – http://resource.soa.com/resource/webinars • Follow us on: www.facebook.com/soasoftware www.linkedin.com/company/soasoftware @soasoftwareinc Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 4. SOA Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 5. Key to Adoption • Two keys: – Interestingly it started off similarly to APIs – with the promise of new revenue and the IoT was on the tip of everyone’s tongues. – The fact is that, five/ten years ago the demand for IoT and Mobile was almost non-existent compared to today. – SOA turned inward, even though that was not the original goal necessarily – The promise of re-use drives businesses to a service orientation – Standards adoption Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 6. Limitations • It’s a complex world with complex issues and it requires support and skills to do correctly. To do SOA right, you need the company behind you, but there are massive payoffs and incredible success stories • Since SOA became an integration technology, it had to become sophisticated (I use that term on purpose) – Security (WS-S*) – Transactionality (WS-*) – Multi-protocol • The timelines associated with an ROI are long, simply because projects are long and organizations are large • A pragmatic reason: readability: Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 7. Common Components Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 8. SOA Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 9. Example - The SOA Catalog • SOA was initially focused on UDDI, WSDL and SOAP. • The idea was that the UDDI standard would provide a consistent way to discover services and associated metadata. • As a sign of things to come, the UDDI standard, while ratified, lost support. I believe that this was due to: – Inflexibility – Human readability Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 10. UDDI - Technical and Inhuman(e) Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 11. The Repository • Over time, the UDDI Registry has been replaced by the Repository • Repositories are more flexible, typically template and workflow driven • Repositories are focused on the development lifecycle • Their goal is to guide development activities and provide visibility and accountability in the SDLC process • Now we are seeing API developer portals emerge to complement internal repositories Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 12. SOA SOA, in its focus on machine to machine integration and standardization, has, in the past, forgotten about the human in the equation. This is changing. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 13. API Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 14. Why APIs? Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 15. The API Portal • The API Catalog approaches the problem from a completely different direction based on its origins – Consumer-facing – Mobile/Web App consumer • APIs continue the trend of human to human, rather than machine to machine, interaction • The developer is now the customer, rather than a participant – A lack of enthusiasm for standards has forced a document-centric approach, which is better for humans anyway – The need for channel marketing has driven a portal design – The need for developer engagement has improved utility Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 16. The Different Roles Repository • • • • API Portal • • • • Production SDLC Security Inside Both are required Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Consumption Promotion/Support Provisioning Outside
  • 17. The Need for Both Production Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Consumption
  • 18. Unified API Platform Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 19. The relationship between APIs and SOA Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 20. • API initiatives are the lucky ones: – Business funding – Green field – Shifted center of gravity Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 21. Common Misconceptions • APIs and Web Services are distinguished by the technology they use, JSON vs. SOAP • APIs have become the external interface to an organization while Web Services have become components for internal collaborations Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 22. What is an API • Has become a broader term than web service, it is not exclusive to JSON/HTTP as some may lead us to believe • Can utilize different data formats such as XML, SOAP, JSON, or plain text • Can utilize different transports such as WebSockets, HTTP, TCP, MLLP, JMS, or MQ • Does not exclude Web Services, SOAP, XML, JMS Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 23. Differentiating through Exposure • The choice of technology should be dictated by the client: – Web/JavaScript – JSON/HTTP, WebSockets – Mobile – JSON/HTTP – Java A2A – XML over the most relevant protocol • You may need to expose multiple types depending on the channel Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 24. Simplifying the Landscape • APIs are a superset of Web Services – it is a business differentiation, not a technical one – Business, product focus – Shifted center of gravity • You need a single platform that is flexible enough to handle multiple: – Transports and Protocols – Message types – Descriptors and Documentation Standards Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 25. Sample Topology Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 26. What’s wrong with the API platform? Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 27. Wire Protocol • APIs are typically JSON/REST – Web/Mobile • Web Services are typically XML/SOAP – A2A Integration • Management platforms need to cater to both. Typically, however, they focus on one to the detriment of the other. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 28. The Need for Both • Depending on the consumer, APIs may need to be SOAP as well as JSON/REST • APIs regularly leverage backend SOAP services within an organization • The management platform therefore needs to: • Understand both APIs and Services • Mediate between SOAP/XML and JSON/REST • Understand the dependencies between APIs and Services to facilitate change management, root cause alaysis etc. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 29. Descriptor • API developers ideally write detailed documentation, with samples messages and code to communicate API details. – Pro : Human readable – Con : Change management is subjective • Web Services primarily use WSDL and WS-Policy – Pro : Change management is explicit – Con : Difficult to understand Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 30. The Need for Both • Effective change management and version control demands that the API and Web Service are formally described in some way – WSDL – Swagger – WADL • The side benefits of this are: – Document generation – Code generation Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 31. Security • APIs typically leverage OAuth or HTTP request signing mechanisms for security – Transport-based (HTTP) – Device capable • SOA leverages WS-S, SAML, WS-Trust, etc – Message-based – XML Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 32. The Need for Both • Security mediation between web standards and WS-* standards is critical • A deep understanding of the different standards and policies is required, including: – OAuth 1.0a/2.0 – Header-based signature mechanisms – SAML – WS-Security – XACML • Token and identity mediation is critical Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 33. Summary SOA, in its focus on machine to machine integration and standardization, forgot about the human in the equation. APIs, in their focus on ease of use, have forgotten about management and control. You need both Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 34. Successful APIs Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 35. Key Components There are three key components to making an API effort successful in the long term.  Design  Implementation  Program Management All of these require a comprehensive platform 35 Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 36. APIs are tip of the Iceberg! Drive Accelerate Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Monetize Analyze
  • 37. What does a Management Platform Provide Business Foundation/ Functional Tier Service Arch. Lifecycle Data arch. NonFunctional Tier Security, Mediation, QoS, Analytics Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Protocol Tier Publishing, Oauth, etc.
  • 38. Business Foundation/Functional Tier • Service Rationalization, Reuse • Lifecycle Management • Change Management • Impact Analysis Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 39. Non-Functional Tier • Security – Integration with Enterprise SSO/LDAP – Message Security/Encryption – Threat Protection • Orchestration • Monitoring – Rate limiting – QoS – SLA • Analytics Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 40. Protocol Tier • SOAP • JSON • etc Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 41. The Unified SOA & API Platform Analytics Developer Engagement Gateway Services Service Integration Lifecycle Management Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
  • 42. API and SOA Resources • Resource Center – http://resource.soa.com/ • Webinar Recording – http://resource.soa.com/resource/webinars • Follow us on: www.facebook.com/soasoftware www.linkedin.com/company/soasoftware @soasoftwareinc Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.