© 2012 IBM Corporation

Nov 12, 2014

z Services API ManagementCreating new opportunities by extending customer “reach” by exposing z based core business functions as APIs

Asit Danz Services API Management, Chief Architectasit@us.ibm.com

Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF) Examples across Industries

• Quote interest rate and Loan application• Checking room availability and reservation• Looking up an item at a store location and purchase

Vision API Opportunity

2

3

API Opportunity

3

Creating new business opportunities by extending “reach” with APIs for accessing enterprise assets and/or with improved security and governance

Reaching new customers and markets with new applications and solutions accessing core (z based) business functions, through business partners

Improving user experience of existing customers and/or delivering new services with Mobile applications

Gaining more business control and insight over access to the enterprise services (e.g., for accountability & chargeback) while also improving visibility to z based services for the internal and external developers • simplifying access to z assets

Opportunity

z Customers have made a significant investment over a long period of time, in developing many valuable assets supporting core business functions (and core competencies)• Leverage these existing assets by exposing as APIs, improving both consumability and governance

• Mobile, Cloud based or third-party applications can invoke these APIs for accessing core business functions

VisionVision

APIM and z assets, fits like a glove: Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF)

z Services APIM: Opportunity

4

VisionVisionz Services APIM: Business challenges

1. Consumability of the APIs is Key: Easier creation and assembly of API from existing assets/services Visibility of APIs to internal and external developers Easier registration (by consuming applications) and set up including managing entitlement

2. Retaining business control (e.g., enforcing entitlement, accountability/chargeback) and gaining business insight in API invocation Securing APIs using a secure GW from unwanted external invocations (mapping to

application level security) and enforcing workload entitlement Business Monitoring of API access in gaining business insight on the use of APIs by external

applications, and for accountability/chargeback

Enterprise

Services

CICSIMSWASTPF

On-Premise Enterprise APIs

Cloud APIs

Mobile Applications

Cloud-based Services

Mobile, Cloud and Third-party Applications invoking z Services using APIs

Why API Management? Business challenges addressed by APIM in exposing z based services/assets

5

Making APIs consumable requires publishing not just what business functions they perform but various additional details on their use, and easy to sign up

• Listing and categorizing APIs for easy to find

• Describing details on how to invoke an API

z Services APIM: Business challenges

An example public site listing its published APIs (similar to many others Twitter, Amazon, etc.)

6

Businesses are transforming themselves to participate in the API economy

Provide self-service API portals to external/internal app developers

Expose business services securely as APIs to developer communities, and analyze API usage

Manage & monitor the entire API platform

On-premiseprivate

Off-premiseSaaS

Off-premiseprivate

Hybrid

IBM API ManagementHow do you rapidly and securely expose

your business to this developer ecosystem?

IBM APIM

IBM API ManagementFully on-premise, multi-tenant solution, for API providers

IBM DataPowerAPI Gateway for security, control, integration &

optimized access to a full range of Mobile, Web, API, SOA, B2B & Cloud workloads

Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide

A single, comprehensive solution to design, secure, control, publish, monitor & manage APIs

IBM APIM

Management ConsoleAPI ManagerDeveloper Portal

Share with developers

3

Create, assemble and define an API

1

Manage growth & analyze results

4

Secure & scale the API

2

Introducing IBM API Management:“A Complete API Management Solution”

IBM APIM

9

End-to-End Architecture for Mobile, Cloud and Third-party Applications accessing z Assets/Services using APIs

1. Develop Services (Web or REST)

On-Premise API Management

Cloud APIs

Mobile Applications

Cloud-based Services

Enterprise Transaction Processing

Enterprise

Services

CICSIMSWASTPF

Access to systems of records and enterprise data via APIs

Jane - Mobile app developerUses APIs to access Back-End services

Bob – developer of z based ServicesDevelops services from CICS, IMS and other z applications

2. Develop Enterprise API s

3. Mobile/Cloud App Enablement

Service Enablement• Enables invocation of z applications by

remote applications using standard protocols (WSDL, REST)

• Converts SOAP or JSON into application specific (e.g., COBOL, PL/I) data and invokes applications

API Management• Consumability by internal and external

developers (creation and look up)• Entitlement Management (securing,

workload enforcement) • Usage monitoring & Analytics

Mobile/Cloud/Third-party Application Development• Invokes APIs for accessing SOR

Shavon – API developerDevelops APIs from z based services

Enterprise APIs

Security & Integration API Gateway(IBM DataPower Appliance)

Create, Publish, Manage & Socialize APIs

(IBM API Management)

zServices APIz Services APIM: Architecture and Capabilities

APIM Communication with GW

10

System Z

z/OS Connect

JSON

WAS Liberty

Security & Integration API GatewayIBM DataPower Appliance

On Premise API Management

CICS

API Invocation

Create, Publish, Manage & Socialize APIs

(IBM API Management)

Discoveryservices

Web Services

REST Services

Discovery and invocation of System z based Services

WOLA based services

Web Services

IMS

SO

AP

G

ate

way

CICS

CICS TG

Enterpr ise

Services

Enterpr ise

Services

zServices APIz Services APIM: Architecture and Capabilities

Discovery of z Services for API Development1. Get a list of deployed services (Service Identification)

- Filter based on technical and business service attributes2. Get schema for a specific service (API Definition)3. Get additional deployment details for a service (API

Assembly)- e.g., security protocol support, invocation uri

Service Development Tool and Enablement Runtimes

Web Services CICS and IMS provides separate tools and runtimes; TPF provides runtime libraries

REST/JSONCICS and IMS use common z/OS Connect runtime

11

Call to Action Leverage existing z assets by exposing as APIs

Reach out to z asset owners in exploring scenarios around the three entry points

1. Reach new customers and markets with new applications and solutions accessing core business functions, through business partners

2. Improve experience of existing customers and/or deliver new services with Mobile applications

3. Gain more business control and insight over access to the enterprise services, while improving consumability and simplifying access to z assets

Partner with z architects - both from the customer side and IBM – for designing an end-to-end solution architecture

Work with IBM through POC Use IBM APIM and z product capabilities in developing API based solution Identify/define incremental business scenarios, and try out through POCs

12

Thank YouQuestions and follow up – asit@us.ibm.com

API Management Resources

Product Page- ibm.com/apimanagement

API developer community- developer.ibm.com/api

Follow us on Twitter- @ibmapimgt

YouTube Channel- youtube.com/ibmapimanagement

14

Business Challenge Difficult for internal partners and developers to discover &

access key financial services Lacked a standard ecosystem to manage internal partners

including global credit card companies and merchants No visibility on Service consumption or ability to

chargeback for LoB use of Services

Business Challenge Difficult for internal partners and developers to discover &

access key financial services Lacked a standard ecosystem to manage internal partners

including global credit card companies and merchants No visibility on Service consumption or ability to

chargeback for LoB use of Services

Example Apps

Solution IBM API Management & DataPower GatewaySolution IBM API Management & DataPower Gateway

Leading Global Commercial Bank provides easy & secure access to key financial services

Business Value Offers 3rd party merchants secure standards-based access

to key business services as APIs, with a self-service experience

Provides an internal ecosystem for partners and a central repository with usage analytics

Drives innovation for Mobile application development

Business Value Offers 3rd party merchants secure standards-based access

to key business services as APIs, with a self-service experience

Provides an internal ecosystem for partners and a central repository with usage analytics

Drives innovation for Mobile application development

$APIM: Business challenges

15

Business ChallengeBusiness Challenge External business partners retrieve flight information by scraping the

company’s website Unauthorized access to full flight information , with no usage analytics Delays in updating website – difficult for authorized partner to test

changes REST-based API had just been built but security was not in place

Solution IBM API Management & DataPower

Business Value Easily and securely connect company Website to new APIs, saving

cost of building OAuth based secure access Enable secure exposure of APIs to External Business Partners, saving

the implementation cost of building a developer support infrastructure with access management

Ability to leverage existing investment in IBM DataPower gateway and internal team skillset

Enable secure Mobile app integration with Enterprise APIs

Large Airline in North America provides authorized access to flight services

IBM API Management

DataPower XG45(With DIM) or XI50/B,XI52

and the AO Option

REQUIRED components

• Physical or VE

• Purchase new or re-use existing appliances

Secure, Control, Optimize

Secure, Control, Optimize

IBM API Management

• 2 Hypervisor Installs

Create, Manage, Socialize

Create, Manage, Socialize

Physical infrastructure

IBM APIM

Roles and Development Tasks for enabling Mobile and Third-party Applications accessing Enterprise Assets

BobCreates enterprises services from existing z assets (CICS, IMS, WAS…) Uses an asset specific tool to generate service deployment artifacts (e.g., bindfile, WSDL) starting with an

existing asset, and deploys the generated artifacts in an appropriate runtime environment (e.g., z/OS Connect, CICS TS/TG, IMS SOAP GW)

Additionally, using an appropriate tool (e.g., CICS or IMS Explorer), explores asset details, and captures key service metadata for later understanding of its business function (such as, description of business function, business classification of this function, association of keywords, etc.)

May also publish this service to an external registry (e.g., WSRR or other existing registries in customer environments)

Shavon Creates an API from an existing service, as well as various entitlement policies Discovers deployed services from various back-end application environments in determining an

appropriate service to expose- Queries existing services based on matching business functions (i.e., service metadata)- Navigates service list and views service description, other metadata and interface definition in understanding

and selecting an appropriate service

Defines an API starting with the selected service interface- Defines API name, description and resource - Defines an appropriate transformations in mapping an API resource to an existing service interface definition- Defines various entitlement policies

May syndicate this API to multiple marketplaces (e.g., BlueMix)

JaneCreates a mobile app invoking APIs • Navigates and views APIs using the developer portal• Develops app code invoking selected APIs

zServices APIz Services APIM: Roles and Capabilities

18

• IBM-managed infrastructure

• Low entry cost

• Pay-per-use• Highly elastic• API Provider

has full control to create APIs & Plans, customize developer portals, publish to developer communities

IBM API Management - Full control & deployment flexibility

• Customer-managed infrastructure

• API Provider has full control to manage & scale the on-premise infrastructure

• Create APIs & Plans, customize developer portals, publish to developer communities

• Best of both worlds

• Meet seasonal capacity without CapEx

• Move APIs & Plans between public & private clouds

• Create APIs & Plans, customize developer portals, publish to developer communities

Off-premiseSaaS

On-premise Private

HybridOff-premise Private

• API Provider-managed on IBM-hosted cloud

• API Provider has full control to manage & scale the off-premise infrastructure

• Create APIs & Plans, customize developer portals, publish to developer communities