API Management

Overview of webMethods
API Management Platform

Subhash Ramachandran
SVP, Product Management

1 | ©2015 Software AG. All rights reserved. For internal use only
Growth in Public APIs

2 | ©2015 Software AG. All rights reserved. For internal use only
APIs are at the center of the Internet of Things

4.9 Billion Connected "Things"

Will Be in Use in 20151

API

IOT
API

1Source: Gartner press release

3 | ©2015 Software AG. All rights reserved. For internal use only
APIs support App3
App1
Hybrid Integration
App2

API calls

Gateway/Mediation

ESB

Oracle, SAP Databases Mainframes

4 | ©2015 Software AG. All rights reserved. For internal use only
 APIs provision Mobile initiatives

33% of enterprises are

investing in API-
driven digital initiatives
Enterprises are increasingly
leveraging APIs for Mobile

Delivering compelling REST APIs supply enterprise

data and functions
customer experiences

Source Forrester: Sizing The Market For API Management Solutions

5 | ©2015 Software AG. All rights reserved. For internal use only
API Management enables Digital Business
Combining the digital and the physical world
“APIs are perhaps the most critical technology in digital business
design.”1
“API management will provide the required security, governance,
and performance management framework”7

Increasing Mobile & Governance, Creating

value to cloud access security & digital
customers to existing performance products
apps & data

Sources: 1- Forrester: Sizing The Market For API Management Solutions, 2- Ovum

6 | ©2015 Software AG. All rights reserved. For internal use only
 Why do APIs Need to be Managed?
The scope of API Management

API Runtime Protect APIs, mediate and manage

Delivery API traffic between cloud and on-premises

API Promotion & Advertise APIs and Developer Initiatives

Self Service and allow simple self-service around APIs

Community & Support collaboration between API

Collaboration providers and developers

Measure & Collect comprehensive usage data,

Monetize improve API offerings & monetize

7 | ©2015 Software AG. All rights reserved. For internal use only
webMethods API Management Platform

• Expose APIs and User management

• Onboard business
partners, developers
• Collaborative environment
• Security & Mediation
• Policy, SLA management
• Lifecycle management
• Create, version, publish,
virtualize, and retire APIs
• Visibility and Monitoring
• View entire API landcape
• Pinpoint SLA violations
• Advanced analytics

8 | ©2015 Software AG. All rights reserved. For internal use only
API-Portal: Expose APIs and Manage Users

• Self-service portal to
expose APIs & onboard
developers and partners
• Built-in Usage Analytics
and reporting
• Integrated Collaboration
• Private API
Commmunities
• REST & SOAP API Testing
• Metadata-driven API
Documentation
• Tenant backup & restore
• Customize with logos,
colors, branding

9 | ©2015 Software AG. All rights reserved. For internal use only
CentraSite: Lifecycle Management

• Catalog all internal and external

APIs
• Document your SOAP and REST APIs
• RAML and Swagger importers
• Manage the API Provider workflow –
Access token request approvals for
API Keys and OAuth2
• Virtualize APIs and configure
policies to be enforced at runtime
• Analyze API runtime usage by
dashboards, reports and traffic
profiles

10 | ©2015 Software AG. All rights reserved. For internal use only
Security & Mediation

• Enterprise Gateway: DMZ level

protection Client Apps

• DoS protection based on IP/Message

volume
• IP Blacklisting and Filtering

DMZ
API Gateway
• Virus Scanner Integration
• Reverse Invoke Technology

ENTERPRISE
• Mediator: API Mediation and
Virtualization
• Enforce Security, Traffic
Management, Monitoring and SLA
Management Policies for APIs
• Intelligent Routing and Load
balancing of Requests
• Collection of analytical data on API webMethods 3rd Party ESB AppServer
consumption and policy evaluation ESB
• SOAP-to-Rest Transformation
• Configurable Service Result Caching
11 | ©2015 Software AG. All rights reserved. For internal use only
Insight: Visibility and Monitoring

• Holistic end-to-end runtime

infrastructure visibility and
monitoring
• Trace calls through the
infrastructure to pinpoint
performance issues
• Detect rogue services and
consumers and govern them with

ENTERPRISE
CentraSite
• Large set of agents for 3rd party
AppServers, ESBs and other ESB
runtimes
RDBMS

Insight Agent
Oracle SAP Databases Mainframes

12 | ©2015 Software AG. All rights reserved. For internal use only
Advanced Analytics

Portal analytics - understand how

your portal & APIs are being used
• Consumption Reports
• Where users are geographically
• Bounce rates
• Which APIs are popular, which arent?
• Ratio of provisioned vs. used access
tokens

Runtime Analytics
• Performance metrics
• SLA metrics & violations
• Consumer identity by host name or IP
address
• Log request/response payloads
• # service invocation per time interval

13 | ©2015 Software AG. All rights reserved. For internal use only
 webMethods
API-Portal

User Mgt

webMethods
Enterprise
Gateway

API Gateway
webMethods
Mediator

Service
Governance
webMethods
Integration & Visibility & Insight

webMethods API Composer Monitoring

ESB

Insight Agent
Software AG
Components
Back-end Systems
14 | ©2015 Software AG. All rights reserved. For internal use only
API-Portal & API
Cloud Details

15 | ©2015 Software AG. All rights reserved. For internal use only
Discovering APIs – Searching and Browsing

• API Gallery allows

simple browsing for
available APIs
• Configurable API
Grouping by
• Maturity level
• Business Terms
• API Groups

16 | ©2015 Software AG. All rights reserved. For internal use only
Investigating APIs (1/3)
High level API overview

Rating

17 | ©2015 Software AG. All rights reserved. For internal use only
Investigating APIs (2/3)
API Details – API parameters, examples, return codes

18 | ©2015 Software AG. All rights reserved. For internal use only
Investigating APIs (3/3)
API Details – API parameters, examples, return codes

Enforced Policies

Endpoint Information

Activity Stream

19 | ©2015 Software AG. All rights reserved. For internal use only
Testing APIs in API-Portal

• API Portal allows to

try out APIs
• Select Sandboxes
• Select Authentication
schema
• Choose REST resource
• Supply parameters as
required
• Try out combinations
of parameters and see
how the API behaves
• Introspect request
and response headers

20 | ©2015 Software AG. All rights reserved. For internal use only
Social Collaboration within the API-Portal

• Collaboration with
threaded
discussions,
moderation
capabilities, liking,
sharing,
tagging, personalized
collaboration feeds
• API level Comments
Stream
for specific
announcements
and feedback
• API level rating

21 | ©2015 Software AG. All rights reserved. For internal use only
 Private API Communities

• API Communities allow to

expose APIs to privileged user
groups
• Membership in a community
determines which APIs are
shown
• Community Admin can invite
users to join the portal or add
existing users
• Primary usecases
• B2B type deployments
• Temporary APIs for events
• Beta programs

22 | ©2015 Software AG. All rights reserved. For internal use only
 Developer onboarding – Self Service

• Onboarding can be configured

to allow for
• Builtin user management
• Reuse of social accounts
(Google+, Facebook)
• User onboarding process allows
for
• Straight through onboarding
• Confirmation e-mails
• Explicit Approvals

23 | ©2015 Software AG. All rights reserved. For internal use only
Full SOAP API Support

• API-Portal fully supports publishing

of SOAP/WSDL based APIs
• All operations are auto-documented
based on WSDL/Schema information
• WSDL documents attached as
references
• SOAP API testing is equally
supported
• Manipulation of SOAP headers
• Support for basic WS-Security models
incl. WSS-UsernameToken Profile

24 | ©2015 Software AG. All rights reserved. For internal use only
 Self Service Customization

• Simply customize the API-Portal online

• Adjust images, disable components, upload CSS+JavaScripts
• Modify rendering templates

25 | ©2015 Software AG. All rights reserved. For internal use only
 API Portal Usage Analytics

Key Capabilities
• An API Portal provider needs to
understand:
• Where do users come from?
• Why do my bounce rates increase?
• Why are certain APIs not embraced?
• What is the ratio of provisioned vs. used
access tokens?
• The API portal provides deep built in
usage data collection and analytic
capabilities
• As API Portal Provider …
• understand consumer behavior
• constantly improve your API Portal

26 | ©2015 Software AG. All rights reserved. For internal use only
 Summary

End-to-End API Management by SAG

• Built, orchestrate and securely expose APIs
• Ready to go self service API Portal

Leverage existing Investments

• Built on proven webMethods and ARIS technologies
• Leverage existing knowledge for API creation &
operations

Single Solution for internal & external APIs

• Manage internal and external APIs the same way
• Reduced costs through a unified solution

27 | ©2015 Software AG. All rights reserved. For internal use only