Rapid Mobile App to API Integration

Apr 23, 2015Download as PPTX, PDF1 like622 views

This document discusses an integrated platform from SOA Software and Appery.io that allows for rapid mobile app development through API integration. The platform offers an end-to-end solution that manages APIs and builds cross-platform mobile apps in a single environment. This integrated experience allows for faster development time and increased adoption by developers. The document then demonstrates the platform's capabilities.

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
Rapid Mobile App to API Integration
Rapidly Transform, Secure and
Integrate APIs with Mobile Apps
across heterogeneous devices
SOA: Ryan Bagnulo @iryanb
Appery.io: Max Katz @maxkatz

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
+
• Problem:
– API management and app creation are disjointed and siloed,
introducing complexity and slowing innovation.
• Solution: SOA + Appery.io
– Offering an end-to-end solution with an integrated experience
– From exposing and managing APIs to building cross-platform
mobile apps.
– The integrated platform delivers faster time-to-market and
results in increased developer adoption.

www.soa.com
jQuery mobile and PhoneGap Mobile
App Developer Studio
Cloud SaaS Platform
Open Standards REST/JSON/OAuth

Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved.
SOA Software API Gateway
Gateway
Security
Authentication
Protection
IAM Integration
Encryption
Mediation
Quality of Service
Paging/Caching
Orchestration
Scripting

www.soa.com
Logical Deployment Architecture

www.soa.com
OpenID Relying Parties
Google https://www.google.com/accounts/o8/id
deprecated May 2014 - shutting down Apr 2015
Yahoo https://me.yahoo.com
StackExchange https://openid.stackexchange.com
VerisignLabs https://pip.verisignlabs.com/

www.soa.com
Map API Responses to UI Fields

www.soa.com
Rapidly place fields & buttons

www.soa.com
To follow along, register for an account to use this SOA API Developer Sandbox
https://p0st3r.eap.soa.com
and read the getting started docs on how to manage an API and consume it with an
App
https://docs.soa.com
@iryanb
DEMO

www.soa.com
Transform & Securely integrate APIs with Apps

www.soa.com
To follow along, register for an Appery.io developer account
http://bit.ly/soaapperyio
and read the getting started docs.
http://devcenter.appery.io/
@maxkatz
DEMO

www.soa.com
A Leader in The Gartner Magic Quadrant
For Application Services Governance
• Best Vision and products for:
Application Services Governance.
• Only Comprehensive, well
integrated offering for API
management and SOA Governance.
• The Only Agnostic and open
standards based Leader
The Gartner document is available upon request.*Gartner, Inc., Magic Quadrant for Application Services Governance by Paolo Malinverno,
Daryl C. Plummer, Gordon Van Huizen, August 8th 2013.

www.soa.com
API Policy Configuration Templates
Operational Policies
o API Consumer Application Security Policy
o API DDoS & Malicious Code Protection
o Aggregate Policy
o Authentication Policy
o Authorization Policy
o Cache Policy
o HTTP Security Policy
o OAuth Security Policy
o Paging Policy
o Pipeline Policy
o WS-Security Asymmetric Binding Policy
o WS-Security Message Policy
o WS-Security Supporting Tokens Policy
o WS-Security Symmetric Binding Policy
o WS-Security Transport Binding Policy
o WS-Addressing Policy
o WS-Auditing SOAP Message Policy
o WS-Auditing SOAP Service Policy
o WS-Auditing Service Policy
o WS-Auditing Transaction Tracking Policy
o XML Policy
Quality Of Service Policies
o Bandwidth Quota Policy
o Concurrency Quota Policy
o Script Policy
o Service Level Enforcement Policy
o Service Level Policy
o Throughput Quota Policy
o Timeout Policy
Compliance Policies
o Aggregate
o Script
o WSI BP
o XQuery

Learn about security architecture, security patterns for app and API access control, and best practices for threat management, data security, identity and compliance including: - how to approach API security for your API program? - the API security pillars - threat protection, data security and identity - best practices for integrating identity services into API management - how to meet compliance requirements for API products

Bigger, Better Business With OAuthApigee | Google Cloud

OAuth is more than an authentication protocol. A decade from now, OAuth will be viewed as the great enabler of new business models and wealth creation in the app economy. In this session we'll investigate why many business development ideas don't make it past the whiteboard and how OAuth changes that. We'll tickle our imaginations and explore what is possible in a world where crossing trust boundaries is done with lower risk, more control and higher security. We Will Discuss » - Blockers to Business Innovation - How OAuth Changes the Rules - Re-Imagining the Future of Business Development

Managing Sensitive Information in an API and Microservices WorldApigee | Google Cloud

OAuth - Don’t Throw the Baby Out with the Bathwater Apigee | Google Cloud

This document discusses OAuth 2.0 and provides recommendations for its use. It summarizes the history of OAuth 1.0 and 2.0, key concepts of OAuth 2.0 like grant types and token types, and real-world usage by major APIs. It recommends sticking to the basic OAuth 2.0 standard without extensions like refresh tokens for most use cases, and authenticating users through existing authentication mechanisms rather than custom implementations.

Enhancing your Security APIsApigee | Google Cloud

Identity Relationship Management - The Right Approach for a Complex Digital W...ForgeRock

Managing Sensitive Information in an API and Microservices WorldApigee | Google Cloud

Kondo-ing API AuthorizationNordic APIs

Apigee and Accenture Webcast - Accenture Technology Vision 2013 - An API Cent...Apigee | Google Cloud

The document summarizes Accenture's Technology Vision for 2013, which identifies eight technology trends and discusses each trend from an API-centric perspective. The eight trends are relationships at scale, design for analytics, data velocity, seamless collaboration, software-defined networking, active defense, and beyond the cloud. For each trend, the document outlines the role and importance of APIs, such as how APIs power the app economy and unlock agility in virtualization. The vision is that every business will become a digital business where the API is the central product.

Data-driven Security: Protect APIs from Adaptive ThreatsApigee | Google Cloud

This document discusses data-driven security and Apigee's approach. It begins by outlining the challenges posed by adaptive threats to APIs. Then it describes why data-driven security is needed and how current security approaches are not adaptive enough. The document introduces Apigee Sense, a new adaptive API security product that detects threat patterns at the API layer using machine learning algorithms. It analyzes billions of events to identify anomalous behavior patterns and detect bot attacks in order to stop bots and protect APIs from sophisticated threats.

OAuth: The Next Big Thing in SecurityApigee | Google Cloud

OAuth is an open standard for authorization that allows apps to access user accounts without passwords. It provides a secure way for users to authorize apps to access their data by granting tokens with specific and limited permissions. This allows for low friction innovation on open platforms while maintaining security. As apps become key intermediaries connecting users and businesses, standardizing on OAuth is important to securely enable this new wave of digital innovation.

Build an api eco-system you can be proud ofCisco DevNet

What do you think of when you hear “Lets build an API for that”? The typical thought process is “Its easy to expose my data/application”. Everyone in the company probably thinks the same– which is great! What happens when we build these API’s though, is that they don’t all follow the same methodology and we don’t think through how to manage their lifecycle. This presentation presents our perspective and guidance on full life-cycle management and governance of API’s – from defining with the customer in mind, building, publishing on a single platform, supporting and retiring API’s for the business outcomes you’re driving! Top Three Take-Aways For Participants: 1. Its easy to manage API’s as long as we think through the life-cycle and have a process. 2. The RAML “Design-First” methodology works great for API adoption by application builders. 3. Managing API’s allows easy policy enforcement, security, analytics and monetization opportunities – with benefits across business, technology and operations aspects.

Mining API Traffic MetadataNordic APIs

Microservices Done Right: Key Ingredients for Microservices SuccessApigee | Google Cloud

This document discusses microservices and keys to microservices success. It defines microservices as independently deployable services that work together. Microservices allow for agility, reuse, and productivity. The document outlines how enterprises are adopting microservices with containers, registries, auto-scaling and blue/green deployments. It emphasizes that REST APIs are a key ingredient for microservices success by enabling consumption and shielding consumers from complexity. The document also notes that microservices will fail without API management for issues like API sprawl, security threats and lack of visibility. It positions Apigee as providing the API layer and management capabilities needed for successful microservices.

API Security LifecycleApigee | Google Cloud

Sydney Identity Unconference Introduction and HighlightsForgeRock

How APIs Can Be Secured in Mobile EnvironmentsWSO2

To view recording of this webinar please use below URL: http://wso2.com/library/webinars/2015/08/how-apis-can-be-secured-in-mobile-environments/ In this session, Shan, director of mobile architecture at WSO2 will discuss: What makes mobile API authentication different from traditional API authentication Best practices for implementing mobile API security What WSO2 API Manager provides for mobile developers

Next Generation API Management & Microservices Service MeshNordic APIs

The API Lifecycle, from pre-production testing to post-production monitoringPaul Bruce

apidays LIVE Paris - Driving innovation through External APIs without putting...apidays

External APIs are driving unprecedented innovation across industries like e-commerce and fintech by automating processes, improving customer experiences, and enabling new business models. However, using third-party APIs also carries risks around security, compliance, and business continuity if not properly governed. The concept of "shadow APIs" - APIs used without an organization's knowledge - exacerbates these risks. To mitigate risks, organizations should detect all API dependencies, build an API knowledge base, integrate governance into development processes, and map all API data flows. Proper API governance is crucial, especially for external APIs over which organizations have less control.

The Digital Retailer: Finding and Engaging Your CustomersApigee | Google Cloud

Traditional retailers are under assault from the demands of the digital economy. The power is shifting from the enterprise to consumers, who are demanding interactive, personalized experiences, wherever they are, whenever they need it. For these consumers, a different retailer is just a click away. In this webcast, Norman Woodard from Accenture and Apigee’s Brian Pagano describe the latest technologies retail companies use to analyze and understand their customers: where they are, on what channels and devices, and how they interact with the retailer. We will explore how building deep insights about customers' context helps retailers provide the relevant, individualized experiences that increase customer engagement. Join to learn: - Consumer trends and the opportunities for retailers - Evolving legacy systems with adaptive apps and APIs - Achieving success as a digital retailer - Retailers that have already started their digital journey Download Podcast: http://bit.ly/1ym9mbc

Financial services rely on APIsRogue Wave Software

Adapt or Die Sydney - API SecurityApigee | Google Cloud

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...CA API Management

This document discusses why APIs must be part of a mobile strategy and provides 5 reasons: 1) Firewalls make accessing APIs difficult due to changing clients and back-end systems, 2) Authentication, authorization, and single sign-on are important for mobile access but challenging, 3) Local app single sign-on is desirable without the negatives of a VPN, 4) Mobile OS isolation silos data and prevents sharing credentials, 5) Users need a way to logout if their device is lost or stolen. It then describes a solution of a native single sign-on SDK for mobile developers to address these problems using OAuth, OpenID Connect, and managing users, apps, and devices securely.

How to Choose the Right API Management SolutionCA API Management

Deploy a system that will empower you to expose APIs in a secure, manageable way Choosing the right API Management solution can make implementing a successful API strategy much easier and help to ensure your APIs are exposed in a secure, manageable way. Join this Layer 7 webinar to learn the key criteria for selecting an API Management solution and to get a solid understanding of the factors that will impact the success of your API strategy. Everyone who registers for the webinar will receive a complimentary copy of The Forrester Wave: API Management Platforms, Q1 2013.

Lifecycle Manager and the Lifecycle APIAkana

The document discusses Lifecycle Manager and its Lifecycle API. Lifecycle Manager is a platform that allows companies to manage the lifecycle of APIs and SOA assets from design through retirement. It includes features like process automation, analytics, and developer engagement tools. The Lifecycle API provides flexibility to integrate Lifecycle Manager into external systems and tools to manage API development and deployment workflows. An example is given of using the API to automate continuous integration and deployment of builds to operational platforms.

Api architectures for the modern enterpriseCA API Management

Extend your legacy SOA/ESB infrastructure to Mobile & IoT This webinar recording provides a use-case driven discussion around appropriate use of existing middleware infrastructure as well as its shortcomings. It dives deep into how APIs can not only complement an ESB or SOA infrastructure but also fill existing gaps. Watch this webinar recording to learn about: - Strengths and weaknesses of your existing ESB/SOA infrastructure - Architecture strategy: extend and add value to legacy middleware with APIs - Integration / API use cases in Retail, Manufacturing and Telecom - The API360 approach to digital strategy

Test and Protect Your APISmartBear

This document discusses the importance of API security testing. It notes that 56% of webinar attendees felt API security was very important to their organization, but only 12% were doing extensive security testing. It highlights some examples of security breaches caused by insecure APIs and recommends implementing API management solutions to protect against threats like unauthorized access, data exposure, and denial of service attacks. The document demonstrates how an API gateway can detect and block a SQL injection attack on a banking API. It emphasizes the importance of putting security protections in place for APIs and including testing in the development process.

API, Integration, and SOA ConvergenceKasun Indrasiri

This document provides an overview of APIs, API management, integration, and API security. It discusses why organizations adopt APIs to accelerate mobile app development, foster reuse, and allow external developers to innovate. The document outlines components of API management like the API gateway and developer portal. It also discusses how SOA, ESB, and APIs can converge in the API facade pattern to provide simple interfaces to complex systems. The presentation demonstrates this pattern using WSO2 API Manager and ESB and discusses API security techniques like OAuth for identity delegation.

Platform for Secure Digital BusinessAkana

More Related Content

What's hot (20)

Apigee and Accenture Webcast - Accenture Technology Vision 2013 - An API Cent...Apigee | Google Cloud

Data-driven Security: Protect APIs from Adaptive ThreatsApigee | Google Cloud

OAuth: The Next Big Thing in SecurityApigee | Google Cloud

Build an api eco-system you can be proud ofCisco DevNet

Mining API Traffic MetadataNordic APIs

Microservices Done Right: Key Ingredients for Microservices SuccessApigee | Google Cloud

API Security LifecycleApigee | Google Cloud

Sydney Identity Unconference Introduction and HighlightsForgeRock

How APIs Can Be Secured in Mobile EnvironmentsWSO2

Next Generation API Management & Microservices Service MeshNordic APIs

The API Lifecycle, from pre-production testing to post-production monitoringPaul Bruce

apidays LIVE Paris - Driving innovation through External APIs without putting...apidays

The Digital Retailer: Finding and Engaging Your CustomersApigee | Google Cloud

Financial services rely on APIsRogue Wave Software

Adapt or Die Sydney - API SecurityApigee | Google Cloud

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...CA API Management

How to Choose the Right API Management SolutionCA API Management

Lifecycle Manager and the Lifecycle APIAkana

Api architectures for the modern enterpriseCA API Management

Test and Protect Your APISmartBear

Apigee and Accenture Webcast - Accenture Technology Vision 2013 - An API Cent...Apigee | Google Cloud

Data-driven Security: Protect APIs from Adaptive ThreatsApigee | Google Cloud

OAuth: The Next Big Thing in SecurityApigee | Google Cloud

Build an api eco-system you can be proud ofCisco DevNet

Mining API Traffic MetadataNordic APIs

Microservices Done Right: Key Ingredients for Microservices SuccessApigee | Google Cloud

API Security LifecycleApigee | Google Cloud

Sydney Identity Unconference Introduction and HighlightsForgeRock

How APIs Can Be Secured in Mobile EnvironmentsWSO2

Next Generation API Management & Microservices Service MeshNordic APIs

The API Lifecycle, from pre-production testing to post-production monitoringPaul Bruce

apidays LIVE Paris - Driving innovation through External APIs without putting...apidays

The Digital Retailer: Finding and Engaging Your CustomersApigee | Google Cloud

Financial services rely on APIsRogue Wave Software

Adapt or Die Sydney - API SecurityApigee | Google Cloud

5 Reasons Why APIs Must be Part of Your Mobile Strategy - Scott Morrison, Dis...CA API Management

How to Choose the Right API Management SolutionCA API Management

Lifecycle Manager and the Lifecycle APIAkana

Api architectures for the modern enterpriseCA API Management

Test and Protect Your APISmartBear

Similar to Rapid Mobile App to API Integration (20)

API, Integration, and SOA ConvergenceKasun Indrasiri

Platform for Secure Digital BusinessAkana

The Business Value for Internal APIs in the EnterpriseAkana

The document discusses the business value of adopting internal APIs within an enterprise. It argues that establishing internal APIs is an important first step before extending APIs externally, as it helps remove silos, enable an internal developer community, and extend the reach of applications within the organization. The document then covers various API adoption patterns, reference architectures for APIs including a unified API gateway and API gateway with ESB. It emphasizes that a unified API gateway can be a good starting point for many organizations.

The Business Value for Internal APIs in the EnterpriseAkana

Enterprise API deployment best practiceSanjay Roy

The document outlines how an enterprise API management platform can help organizations address challenges in the modern API economy. Specifically, it discusses how such a platform can: 1) Modernize legacy application interfaces by mediating between different interface standards. 2) Create new APIs and applications by orchestrating internal and third-party APIs. 3) Securely manage the lifecycle of APIs, applications, and partners from development to production.

API Security: Securing Digital Channels and Mobile Apps Against HacksAkana

More and more enterprises today are doing business by opening up their data and applications through APIs. Though forward-thinking and strategic, exposing APIs also increases the surface area for potential attack by hackers. To benefit from APIs while staying secure, enterprises and security architects need to continue to develop a deep understanding about API security and how it differs from traditional web application security or mobile application security.

API Security: Securing Digital Channels and Mobile Apps Against HacksAkana

The document discusses API security and outlines the SOA Software API platform. It describes the evolution of digital channels from client-server/web applications to web services to APIs. It then covers various aspects of API security like authentication, authorization, OAuth, message security, threat protection, content filtering, rate limiting. Finally, it provides an overview of the capabilities of the SOA Software API platform for securing APIs across the lifecycle.

Api economyMarketing Fiorano

Manage Your MeshAkana

Oracle Mobile Solution OverviewMee Nam Lee

Manage Your MeshAkana

Manage Your Mesh discusses securing public cloud IoT APIs and building private mesh trust domains. It emphasizes using API gateways for security, authentication, encryption and other functions. Gateways can be used both in the cloud and privately. Public, private and hybrid mesh architectures are discussed. The document also covers monitoring meshes, managing mobile app access through a developer portal, multi-site meshes, restricting API operations and scopes, enforcing SLAs, and managing API documentation and usage reporting.

(SACON) Suhas Desai - The Power of APIs – API Economy Trends & Market Drivers...Priyanka Aash

The session will focus on delivering the key trends in APIs, API Management Platform technologies and how it is driving the API economy. We will also discuss the key drivers for digital transformation initiatives which include wide acceptance of APIs in Industry 4.0, Connected Devices, Cloud and Payments industry. Next, we will talk about the top 10 security risks in APIs, API Management Platforms, APIs integrations with cloud platforms, IoT/OT devices integrations with third-party applications. Lastly, we will uncover the need for implementing the API security governance framework and how to measure the API security programme’ s success through this governance framework.

Enabling the Multi-Device UniverseCA API Management

Moving beyond conventional single sign-on to seamless cross-device access with APIs People are carrying more devices every day – with the average being 2.9 per person. Meanwhile, multitasking has gone into overdrive, as users quickly move from laptop to phone to tablet, expecting a seamless experience when accessing their favorite apps. And this expectation is not just limited to leisure and personal use – it extends to business applications. Security has broken this seamless workflow and inhibited the mobile “stickiness” businesses are striving to achieve. This webinar with Scott Morrison and Leif Bildoy of CA Technologies will demonstrate how the right combination of identity functionality and secure APIs can help your organization to overcome these challenges and enable the multi-device universe. You Will Learn • What challenges must be overcome when supporting multiple mobile app types • How SSO is evolving past mobile app access to device access • Why the right implementation of identity and APIs will create consumer stickiness • How the Internet of Things (IoT) is creating new business opportunities

Mobile SSO: Give App Users a Break from Typing PasswordsCA API Management

Why do we use mobile devices? Simple – they’re easy to use and very convenient. So, why do we make it so hard for mobile consumers to do business with us by confronting them with multiple login screens and passwords? While security is essential to protecting mobile usage, convenience cannot be sacrificed. With the release of the CA Layer 7 Mobile Access Gateway 2.0 and its Mobile SDK, organizations can now achieve faster mobile consumer engagement, end-to-end mobile app security and convenient mobile Single Sign-On (SSO). In this webinar, Tyson Whitten and Leif Bildoy of CA Technologies explore the why and how of mobile SSO and the Mobile Access Gateway. You will learn • The mobile app choices you need to make to enable better consumer engagement • The connectivity and security implications of these choices • The mobile security solutions that balance security and convenience

Trust No One: The New Security Model for Web APIs - SecTor talk by Greg Kliew...CA API Management

SSO Agility Made Possible - November 2014Andrew Ames

CA SSO (formerly SiteMinder) has served the web access security functions of so many, yet the mobile channel is expanding how organizations think about security and APIs are the fundamental connectivity point. Acclaim Consulting, CA and National Rural Electric Cooperative Association (NRECA) present a strategy and solution for "future-proofing" security and SSO. Topics covered: • Centralizing security policy and auditing across multiple platforms and devices • Unified security using cookies or tokens for authorization and session management • Leveraging current investments in IT security assets and extending to mobile apps • Business Solution Collaboration - Security Architect and Application Developers

WSO2Con Asia 2014 - Building the API-Centric EnterpriseWSO2

WSO2 helps businesses become API-centric by providing tools and infrastructure to support the entire API lifecycle from creation to management to hosting. The platform supports developing RESTful and SOAP APIs and hosting them scalably. It also offers an API management solution, tools for creating and testing APIs, and capabilities for collecting data from user interactions and performing analytics. WSO2 aims to make user interactions with apps and APIs as smooth as possible through features like single sign-on, app marketplaces, and support for hybrid cloud deployments.

Open API and API Management - Introduction and Comparison of Products: TIBCO ...Kai Wähner

In October 2014, I had a talk at Jazoon in Zurich, Switzerland: "A New Front for SOA: Open API and API Management as Game Changer" Open API represent the leading edge of a new business model, providing innovative ways for companies to expand brand value and routes to market, and create new value chains for intellectual property. In the past, SOA strategies mostly targeted internal users. Open APIs target mostly external partners. This session introduces the concepts of Open API, its challenges and opportunities. API Management will become important in many areas, no matter if business-to-business (B2B) or business-to-customer (B2C) communication. Several real world use cases will discuss how to gain leverage due to API Management. The end of the session shows and compares API management products from different vendors such as TIBCO API Exchange, IBM, Apigee, 3scale, WSO2, MuleSoft, Mashery, Layer 7, Vordel

API Design Essentials - Akana Platform OverviewAkana

API Management has changed a lot in the past four years. It has gone from a toy prototype to a required foundational component in every enterprise architecture. Being foundational, an API management solution must address the needs of each role that takes part in an API’s success. The Akana Platform provides an end-to-end API Management solution. It enables each role with the tools needed for designing, implementing, securing, managing, monitoring, and publishing APIs in the cloud, hybrid, or on premises. This webinar we will provide a detailed look into Akana’s Platform API design capabilities with a live demo. In this webinar, you will learn: • What roles play a key part in an enterprise API management solution? • Where does API Management fit within your enterprise architecture? • What capabilities does the Akana Platform provide? • Demo of how to design APIs in the Akana Platform

Building Mobile (app) Masterpiece with Distributed AgileWee Witthawaskul

The document discusses how the speaker built a distributed agile team to develop a successful mobile app for Morningstar for iPad. Key points include: - The project started in 2011 and involved developing concurrently for iOS and a Java backend. - The team implemented agile practices like continuous integration, automated testing, and tracking work in JIRA to facilitate distributed development. - The app launched in 2013 and became a top 10 finance app, demonstrating the effectiveness of their distributed agile approach to mobile development.

API, Integration, and SOA ConvergenceKasun Indrasiri

Platform for Secure Digital BusinessAkana

The Business Value for Internal APIs in the EnterpriseAkana

Enterprise API deployment best practiceSanjay Roy

API Security: Securing Digital Channels and Mobile Apps Against HacksAkana

Api economyMarketing Fiorano

Manage Your MeshAkana

Oracle Mobile Solution OverviewMee Nam Lee

Manage Your MeshAkana

(SACON) Suhas Desai - The Power of APIs – API Economy Trends & Market Drivers...Priyanka Aash

Enabling the Multi-Device UniverseCA API Management

Mobile SSO: Give App Users a Break from Typing PasswordsCA API Management

Trust No One: The New Security Model for Web APIs - SecTor talk by Greg Kliew...CA API Management

SSO Agility Made Possible - November 2014Andrew Ames

WSO2Con Asia 2014 - Building the API-Centric EnterpriseWSO2

Open API and API Management - Introduction and Comparison of Products: TIBCO ...Kai Wähner

API Design Essentials - Akana Platform OverviewAkana

Building Mobile (app) Masterpiece with Distributed AgileWee Witthawaskul

More from Akana (20)

The Latest in API Orchestration, Mediation, and IntegrationAkana

Once you have designed your API interface, the next task becomes implementation. Often, this requires some form of orchestration, mediation and/or integration to new or existing assets and Microservices. The next generation of the Akana Platform provides our customers with the ability to more quickly and easily move from designing the API interface into implementing the API through configurable orchestration, mediation, and integration capabilities. In this webinar, you will: • Discover what is new with the latest release of the Akana Platform • Learn what is required for scalable API orchestration • Experience the new Akana Platform UX • See a live demo of the enhanced Akana Platform focusing on the API Orchestration, Mediation and Integration capabilities

Deconstructing API SecurityAkana

The document discusses the evolution of security for digital channels and APIs. It describes how security progressed from client-server applications focused on network isolation, to web services using standards like SSL/TLS and WS-Security, to the rise of APIs which disrupted security models. The document then outlines common API security concerns and best practices for securing APIs, including authentication, authorization, message security, threat protection, content filtering, rate limiting, and managing the API lifecycle through governance.

Eat Your Microservices Elephant One Bite at a TimeAkana

There seems to be a tendency amongst architects to think of microservices as a way to build entire applications, taking monoliths and completely re-implementing them as a set of microservices. This belief makes a lot of architects, especially in large enterprise, question whether microservices is right for their organization. This webinar examines a different way of looking at this issue. The presentation probes where we can analyze an application, identify one or more clearly defined functions that have scaling or distribution challenges and pull those functions out of the application as microservices. As the subject of the webinar says, this will allow you to “eat your microservices elephant one bite at a time.”

API Economy - The Making of a Digital BusinessAkana

The document discusses establishing an API strategy for a digital business. It recommends understanding the stakeholders and value chain, setting goals and objectives, treating the API as a product, choosing assets to expose, designing for developers, establishing a business model, and creating a marketing plan. The overall message is that a well-planned API strategy is important for powering the digital economy and networking at scale.

Extracting Insights from your API ProgramsAkana

Confronting API Security in the Brave New Open Banking EraAkana

API Adoption Patterns in Banking & The Promise of MicroservicesAkana

Realizing Hybrid Cloud: Using IBM Bluemix, APIs, and DataPowerAkana

The document discusses hybrid cloud and how APIs can be used to enable an effective hybrid cloud strategy. It presents three models of hybrid cloud - ad-hoc, bespoke, and API-driven. The API-driven model is identified as optimal for meeting stakeholder needs and making hybrid cloud work. The document also describes a demo using IBM Bluemix, APIs, and DataPower to deliver cloud integration solutions and realize an API-driven hybrid cloud.

Architecting Mobile Solutions Using Microsoft Azure and AkanaAkana

This document discusses architecting a mobile solution using Microsoft Azure and Akana. It provides an overview of Akana and its unified SOA and API platform. It then describes a mobile platform project for a major US grocery chain to increase loyalty and sales through a mobile app. The technical goals and benefits of using Microsoft Azure and Akana's platform are outlined. The architecture reviewed includes data flow, on-premise systems, partner integrations, Azure services used, business logic, the API gateway, and mobile clients. It concludes with patterns and best practices for the architecture.

Digital Healthcare – Realizing Interoperability with APIsAkana

Driving Digital Innovation with a Layered API Design ApproachAkana

In this webinar, Akana’s guest speaker, Randy Heffner of Forrester Research, will describe the principles of layered API design and why it is critical for your API strategy. Alistair Farquharson, CTO at Akana, will describe the concept of federated APIs and how an API Management platform can be effectively used to deliver layered API design. Included will be: - Why businesses undergoing digital transformation need to design for multiple channels. - The principles of layered API design. - What federated APIs are. - How an API Management platform can be leveraged to deliver layered API Design.

Securing Your APIs against the Recent Vulnerabilities in SSLv2/SSLv3 Akana

Recently revealed vulnerabilities in SSLv3, OpenSSL and other cipher suites may expose your transactions or APIs over web browsers, web servers or HTTPS to new threats. Hackers can attack and take advantage of the protocol version negotiation features built into SSL/TLS to force the use of SSL 3.0 and decrypt selected content within the SSL sessions. Given these vulnerabilities, how can businesses ensure and safeguard critical data? Attend this webinar to learn HTTPS configuration best practices and tools to harden your HTTPS endpoints with right protocols and cipher suites.

Making Sense of Hypermedia APIs – Hype or Reality?Akana

Microservices: Why Should Businesses Care?Akana

The document discusses microservices and related concepts. It defines microservices as small, independent services that work together. It explains that microservices utilize DevOps, containers, and SOA principles. Adopting microservices requires rearchitecting applications, developing new skills around principles like decentralized governance and data management, and ensuring the necessary operational maturity around DevOps and containers. While improving agility and scalability, microservices also present challenges for restructuring teams and investments in new frameworks.

Using APIsAkana

SOA Software built its first product in 2002 and had been thriving since. They considered building an API for their product to create a new UI and channel strategy without replacing their existing technology. They debated what API to build, how to manage and secure the new channel, and how to promote API usage. They decided to build a RESTful/JSON API to support their UI and mobile devices, leverage the API management and community capabilities within their own product to address management and promotion, and not replace their existing Java-based technology.

Unified Security for Mobile, APIs and the WebAkana

The document discusses security challenges for mobile, web and API technologies. It covers authentication, authorization, single sign-on, licensing, quota management, and protection challenges. Standards like OAuth, SAML, OpenID and SCIM are creating a confusing array of options. The document also discusses combining SAML with OAuth for authentication, using licensing for access control and service levels, implementing quota management, and leveraging security policies.

Turbo-Charge DataPower to Reach Your SOA GoalsAkana

The document discusses how SOA Software's products can help turbo charge IBM DataPower appliances to better meet the needs of service-oriented architecture (SOA). It outlines key DataPower requirements like service lifecycle management, automation, scalability, and incorporating SOA features. The presentation then demonstrates how SOA Software solutions address these requirements and provide benefits like reducing costs and bringing services to market faster. It concludes by advertising upcoming webinars on related topics and providing contact information.

The Science of APIs in a Mobile World:Security, Control and QualityAkana

This document discusses API monitoring and management. It introduces speakers Laura Heritage and John Musser who will discuss securing APIs for mobile applications. The number of connected devices is growing rapidly. APIs allow both internal and external innovation but require security. API monitoring provides end-to-end visibility to ensure quality and prevent issues. It analyzes performance, errors, and content to identify problems and inform developers. API management and monitoring work together to give a global view of API usage and health.

The Datacenter APIAkana

The document discusses using a Datacenter API to optimize utilization of datacenter resources, gain competitive advantage, and ensure flexibility. The Datacenter API would allow controlling resources like virtualization, storage, networking, security and applications through a single API. It would optimize utilization through command/control apps and enable building cloud-native applications that abstract away specific vendor implementations.

The API Economy is Here: Facebook, Twitter, Netflix and Your IT EnterpriseAkana

The document discusses application programming interfaces (APIs) and defines them as specifications that allow software components to communicate with each other. It provides Wikipedia's definition of an API as including specifications for routines, data structures, object classes, and variables. The document also discusses how APIs can be used to unlock human innovation within a business ecosystem by enabling employees, business partners, channel sales communities, and customers to enhance products and services.

The Latest in API Orchestration, Mediation, and IntegrationAkana

Deconstructing API SecurityAkana

Eat Your Microservices Elephant One Bite at a TimeAkana

API Economy - The Making of a Digital BusinessAkana

Extracting Insights from your API ProgramsAkana

Confronting API Security in the Brave New Open Banking EraAkana

API Adoption Patterns in Banking & The Promise of MicroservicesAkana

Realizing Hybrid Cloud: Using IBM Bluemix, APIs, and DataPowerAkana

Architecting Mobile Solutions Using Microsoft Azure and AkanaAkana

Digital Healthcare – Realizing Interoperability with APIsAkana

Driving Digital Innovation with a Layered API Design ApproachAkana

Securing Your APIs against the Recent Vulnerabilities in SSLv2/SSLv3 Akana

Making Sense of Hypermedia APIs – Hype or Reality?Akana

Microservices: Why Should Businesses Care?Akana

Using APIsAkana

Unified Security for Mobile, APIs and the WebAkana

Turbo-Charge DataPower to Reach Your SOA GoalsAkana

The Science of APIs in a Mobile World:Security, Control and QualityAkana

The Datacenter APIAkana

The API Economy is Here: Facebook, Twitter, Netflix and Your IT EnterpriseAkana

Rapid Mobile App to API Integration

1. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. Rapid Mobile App to API Integration Rapidly Transform, Secure and Integrate APIs with Mobile Apps across heterogeneous devices SOA: Ryan Bagnulo @iryanb Appery.io: Max Katz @maxkatz

2. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. + • Problem: – API management and app creation are disjointed and siloed, introducing complexity and slowing innovation. • Solution: SOA + Appery.io – Offering an end-to-end solution with an integrated experience – From exposing and managing APIs to building cross-platform mobile apps. – The integrated platform delivers faster time-to-market and results in increased developer adoption.

3. www.soa.com jQuery mobile and PhoneGap Mobile App Developer Studio Cloud SaaS Platform Open Standards REST/JSON/OAuth

4. www.soa.com

5. www.soa.com Flexible Deployment Model

6. Copyright © 2001-2013 SOA Software, Inc. All Rights Reserved. SOA Software API Gateway Gateway Security Authentication Protection IAM Integration Encryption Mediation Quality of Service Paging/Caching Orchestration Scripting

7. www.soa.com Logical Deployment Architecture

8. www.soa.com OpenID Relying Parties Google https://www.google.com/accounts/o8/id deprecated May 2014 - shutting down Apr 2015 Yahoo https://me.yahoo.com StackExchange https://openid.stackexchange.com VerisignLabs https://pip.verisignlabs.com/

9. www.soa.com Map API Responses to UI Fields

10. www.soa.com Rapidly place fields & buttons

11. www.soa.com HTML5 & Publish Native Apps

12. www.soa.com To follow along, register for an account to use this SOA API Developer Sandbox https://p0st3r.eap.soa.com and read the getting started docs on how to manage an API and consume it with an App https://docs.soa.com @iryanb DEMO

13. www.soa.com Transform & Securely integrate APIs with Apps

14. www.soa.com To follow along, register for an Appery.io developer account http://bit.ly/soaapperyio and read the getting started docs. http://devcenter.appery.io/ @maxkatz DEMO

15. www.soa.com A Leader in The Gartner Magic Quadrant For Application Services Governance • Best Vision and products for: Application Services Governance. • Only Comprehensive, well integrated offering for API management and SOA Governance. • The Only Agnostic and open standards based Leader The Gartner document is available upon request.*Gartner, Inc., Magic Quadrant for Application Services Governance by Paolo Malinverno, Daryl C. Plummer, Gordon Van Huizen, August 8th 2013.

16. www.soa.com API Policy Configuration Templates Operational Policies o API Consumer Application Security Policy o API DDoS & Malicious Code Protection o Aggregate Policy o Authentication Policy o Authorization Policy o Cache Policy o HTTP Security Policy o OAuth Security Policy o Paging Policy o Pipeline Policy o WS-Security Asymmetric Binding Policy o WS-Security Message Policy o WS-Security Supporting Tokens Policy o WS-Security Symmetric Binding Policy o WS-Security Transport Binding Policy o WS-Addressing Policy o WS-Auditing SOAP Message Policy o WS-Auditing SOAP Service Policy o WS-Auditing Service Policy o WS-Auditing Transaction Tracking Policy o XML Policy Quality Of Service Policies o Bandwidth Quota Policy o Concurrency Quota Policy o Script Policy o Service Level Enforcement Policy o Service Level Policy o Throughput Quota Policy o Timeout Policy Compliance Policies o Aggregate o Script o WSI BP o XQuery

17. www.soa.com Q&A

Editor's Notes

#3: Suggested slide to set up the content Suggested speaking points: Today, the processes for managing APIs and building the apps that consume them are disjointed and siloed, introducing complexity and slowing innovation. SOA Software and Appery.io have joined hands to offer an end-to-end solution that provides an integrated experience that goes from exposing and managing APIs to building cross-platform mobile apps. The integrated platform delivers faster time-to-market and results in increased developer adoption.

Rapid Mobile App to API Integration

Recommended

More Related Content

What's hot (20)

Similar to Rapid Mobile App to API Integration (20)

More from Akana (20)

Rapid Mobile App to API Integration

Editor's Notes