TechTalk: Extend Existing Architectures to Digital Endpoints with CA API Management

Aaron Flint

DevOps: API Management and Application Development

CA Technologies

Sr. Principal Product Manager

DO3T27T

#CAWorld

2 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

© 2015 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.

The content provided in this CA World 2015 presentation is intended for informational purposes only and does not form any type of

warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.

For Informational Purposes Only

Terms of this Presentation

3 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Abstract

As an enterprise architect, you understand the integration challenges of the application economy and that legacy architectures can’t be left behind. In order to be successful, enterprises must leverage APIs to seamlessly connect existing systems and data to cloud, mobile and IoT.

Stephen Mak

CA Technologies

Principal Product Manager

4 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Agenda

COMMON INTEGRATION CHALLENGES

THE CA API GATEWAY: A BRIEF INTRODUCTION

SUMMARY

GATEWAY INTEGRATION USE CASES

CA API GATEWAY AS A PLATFORM

GATEWAY IN CA API MANAGEMENT SAAS

1

2

3

4

5

6

5 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Common Integration Challenges

API Modernization– From mainframe to web services to RESTful APIs

Connecting Disparate Systems– New and legacy

– Different protocols

New Integration Paradigms– Microservices

– Services deployment

6 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

The CA API GatewayConnect and Protect Services and APIs to Applications

API Server

DataAPI

OUTSIDE PARTNERS / DIVISIONS

EXTERNAL DEVELOPERS

MOBILE APPS CLOUD SERVICES INTERNET OF THINGS

APPS

CA API Gateway CA Mobile API GatewayCA API Developer Portal

CA API Management Suite

7 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

The CA API GatewayPolicies, Assertions and Policy Manager

Assertions are atomic components of API Gateway policies.

Less than 200 pre-defined assertions available.

Extensible assertion framework– Custom Assertion SDK

Policy constructs facilitate re-use

– Global policies– Policy fragments– Encapsulated assertions

AssertionsPalette

Policy Development

Window

Services & Policies

8 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Gateway Integration Use Cases

API and Services Security, Proxying, Aggregation and Orchestration

Message Transformation

Data Integration

Flight Information Service

Flight Reservation Service

Baggage and Cargo Tracking

LDAP

Social Networks

CA API Gateway

Published APIsThird-Party App Developers

Mobile Apps

Example: Airline Customer Loyalty Through Mobile Engagement

9 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Case Study: Financial Payments

ProblemCustomer needed an all-in-one PCI compliant, edge-deployed gateway to secure B2B interactions, manage integrations to SFDC and Workday and manage API for customer’s mobile funds transfer service.

SolutionCA API Gateway secures all interactions with cloud-based SaaS providers and mobile applications, authenticating and authorizing all inbound/outbound interactions.

ResultsSuccessful rollout of enhanced services with flexibility to add/grow over time faster and with lowered costs.

Cloud Integration: Hybrid B2B, SaaS and Mobile Integration:

1 Login requests

5 Response2Delegated

authentication request

3 Login Approved?

4 Login ApprovalCA API Gateway

Enterprise Data Internal User

Mobile FundsTransfer

10 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

CA API Gateway as a Platform

Custom Assertion SDK– Enables developers to write their own assertions, and include them in the Gateway for

use in policies

Gateway REST-Management API– Provides CRUD control over (nearly) all entities on the Gateway

– Gateway migration utility

Solution Kit framework– Enables Developers to put policies, assertions and Gateway configurations in easily

distributable, installable and maintainable package

Extension Points That Enable Integration Beyond OOB Capabilities:

11 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Custom Assertion SDK

Integration via Java™ and third-party libraries

Gateway version-independent

Examples– AMQP

– Contivo

– DFDL

– CA APM-API Gateway integration

Enable new integration and functionality in policies:

12 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Gateway REST-Management API:

Enabled via Gateway REST Management Service

Thirty-eight resources available (and growing)

Resource/function Method REST-MAN API request

Documentation GET https://MyGateway:8443/restman/1.0/doc/home.html

Services (all) GET https://MyGateway:8443/restman/1.0/services

Folders (all) GET https://MyGateway:8443/restman/1.0/folders

Folders (specific) GEThttps://MyGateway:8443/restman/1.0/folders?name=MyFolde

r

JDBC connections GET https://MyGateway:8443/restman/1.0/jdbcConnections

Bundle (export) GET https://MyGateway:8443/restman/1.0/bundle?all=true

Bundle (import) PUT https://MyGateway:8443/restman/1.0/bundle?test=true

13 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Solution Kit Framework

May contain– Policies

– Assertions

– Configurations

Enables– Distribution

– Installation

– Upgrade

– Maintenance

14 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Gateway in CA API Management SaaSHow the CA API Gateway enables hybrid deployment:

Security

Silent provisioning

Scheduler—secure

synchronization

API Portal Portal Gateway

CA API Management SaaS Environment

Tenant GatewayCluster 1

Secured On-Premises

Environment

Protected APIs

API calls from tenant

Tenant GatewayCluster 2

First time enrollment Regular data synchronization Published data sync’d between

Portal & Tenants

15 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Gateway in CA API Management SaaSHow the CA API Gateway Enables Analytics

API Portal

Portal Gateway

GoodData Analytics

Tenant Gateway Data lakeMobile apps

API requestsscheduled raw data transfer ETL

SSO &authentication

Portal user

view/edit reports

16 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Dynamic, On-Demand API Proxying:

Dynamically deploy dedicated

gateway, publish and secure APIs.

Secure API to enterprise standards.– e.g., OAuth, LDAP, …

Set service (API) availability.– e.g., rate limit, day/time, …

(1) create API

central enterprise GW

(2) request API proxy

on-demand GW

(3) deploy GW(4) publish API

(6) route to

developer

(5) call API

app

api

APIAPIAPIAPIAPI

17 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Using the CA API Gateway for Integration

The CA API Gateway provides a rich collection of policy assertions out-of-the box that enable integrations with a wide range of protocols and systems.

The CA API Gateway is extensible and can be used as a platform for building new and creative solutions. Developers can create new custom assertions to integrate with third-party systems, or use the gateway management REST APIs to integrate with organizational processes and workflows.

Many of the SDKs and APIs of the CA API Gateway that the CA API Management team utilizes to enable new features and functionality—such as integration with third-party analytics—are also available to gateway users.

SummaryEnabling Seamless Integration

18 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Recommended Sessions

SESSION # TITLE DATE/TIME

DO3T05SVision and Roadmap: Accelerating the Speed of App Delivery

with Developer-Centric API Management (Phil Walston)11/18/2015 at 1:00 pm

DO3T28TTechTalk: Secure the Open Enterprise with CA API Management

(Ola Mogstad & Sascha Preibisch)11/19/15 at 11:30 am

DO3T29TTechTalk: Accelerate Mobile Development using SDKs and Open

APIs with CA API Management (Leif Bildoy)11/19/15 at 1:00 pm

DO3T30TTechTalk: Unlock the Value of APIs through Direct and Indirect

Business Models with CA API Management (Dana Crane)11/19/15 at 4:30 pm

19 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Q & A

20 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

For More Information

To learn more, please visit:

http://cainc.to/Nv2VOe

CA World ’15