Tag Archives: API Managerment

iJet International: Transforming Identity Management for Increased Agility

iJet International provides customized risk management solutions, underpinned by intelligence, to global organizations for enhanced functionality and profitability. Their global intelligence experts monitor the world around the clock and empower their clients to respond to events such as natural disasters and political upheavals. The R&D at iJet is owned by their innovation arm, iJet Labs, who transformed their identity and access management (IAM) systems using WSO2’s IAM and API management capabilities. This transition was driven by a need to become more competitive, agile, and improve their business value for customers.

The pre-WSO2 days at iJet Labs were challenging, if it were to be described in one word. A centralized IAM solution was absent and in its place, there were purpose-built custom applications. As the user base increased, scalability became difficult and iJet could not always meet their various customers’ exact requirements. iJet Labs understood that it was imperative to create a centralized solution, which can be delegated to their clients to help meet their requirements and give them greater control of managing their credentials. At the time, user provisioning was a manual process. Even though this process was functional for several years, it was not necessarily user-friendly – there were examples of users repeating this process multiple times as they needed to access different types of systems.

Adding to their list of challenges, the architecture was an issue. From its inception in 1999, iJet has continually added many applications to their architecture, built on a central database. Yet again scalability proved to be problematic, as an application had to be scaled in its entirety and this was time consuming (though possible). “We are a product company, it is very important for us to market our ideas from the product team within the shortest possible timeframe. We need that market advantage, and this legacy architecture made it too difficult for us to be competitive,” says Ismail Seyfi, Lead Software Architect at iJet Labs.

iJet upgraded their architecture using WSO2 capabilities and migrated their servers to a WSO2 managed cloud. As big advocates of open source, Alfresco, Liferay, GeoServer, and Apache applications also contribute to their architecture. The WSO2 IAM platform has replaced iJet’s custom-built user and access management system. This introduction did not disrupt any existing applications, which now use proxy-based authentication. WSO2’s API management platform has enabled iJet to write microservices and replace their monolithic applications.

iJet Labs’ aspirations were not solely limited to revising their architecture, there were several deployment goals in mind as well. They wanted to build and configure an environment where new products could be developed efficiently without causing any interference to other development projects in progress. This was achieved by using an iJet development stack (which separates environments, installs software, and integrates them into one environment), base installation of WSO2 products and automated configuration. Ansible was adopted as the infrastructure and configuration tool. The positive results have become evident at iJet International. The changes have allowed them to integrate environments efficiently, provide dedicated environments to each development stream, sync environments with production, eliminate manual changes, and provide a single source of truth for configurations.

Listen to iJet International’s presentation by Ismail Seyfi and Matt Barnes (Automation and Software Engineer, iJet) for an in-depth discussion of this project.

Find out more about using WSO2’s IAM and API management platforms for business agility.

WSO2Con Insights – BarclaycardUS Optimizes Backend Services and Performance Across 10 Distinct Environments with WSO2 ESB

As one of the world’s largest and most respected financial services companies, with partnerships that include over 60 best-in-class companies and brands, BarclaycardUS is dedicated to making the purchasing experience simple and rewarding for its customer community. A key part of serving those customers is working with backend service providers using multiple protocols at very high volumes, explained Alex Brown, BarclaycardUS group lead, in his presentation at WSO2Con 2013 US.

For BarclaycardUS, the solution has been to integrate to integrate WSO2 Enterprise Service Bus (WSO2 ESB) with its existing service-oriented architecture (SOA), and leverage REST APIs with the ESB to boost performance and monitoring across 10 distinct environments.

Different Partners with Different Domains

BarclaycardUS’ partnerships involve handling credit cards for large companies such as Apple and LL Bean, and specializing in the backend services for these types of businesses. Additionally, BarclaycardUS works with different vendors to conduct its credit checks, rewards and fulfillment.

“This creates an interesting perspective, since we have to integrate with a lot of different partners with unique and different needs,” Brown said.

AlexBrown-Barclaycard1According to Brown, the company has to accommodate applications and services relying on SOAP, REST, Android and Apple iOS mobile operating systems, Voice XML, and OFX, along with many different APIs. In the wake of increased cross-domain orchestration, BarclaycardUS realized the need for an ESB to serve as a common backbone for connecting these different services.

After exploring various offerings on the market, BarclaycardUS decided on WSO2 due to its ease-of-use and comprehensive middleware stack, which represented endless possibilities for growth.

“The other open source platforms we looked at during the time didn’t have that, and WSO2 was very complete and robust and supported all the modern protocols, which was a big advantage for us,” Brown explained.

Strengthening Services with WSO2 ESB

Today, Brown noted, “We’re leveraging the ESB and different parts of it, and we have a lot of different use cases.” At WSO2Con he reviewed three of those use cases to highlight how WSO2 ESB is enabling BarclaycardUS to optimize business services.

Prepaid Platform is a new service the company has rolled out, which works as a mobile application available on iPhone and Android application stores. It supports balance inquiry and mobile application and origination, Brown noted. The mobile bill payment platform also is leveraging external prepaid vendors.

“To do that, we had a mobile app that was talking in REST to the ESB, and behind the scenes AlexBrown-Barclaycard2 we had to orchestrate to many different systems,” Brown explained.

Core Domain Services: are hosted in many locations and pull data from data sources and different vendors. As a result, company wants to gain control over what is happening and have a cohesive view of service APIs in the organization, Brown explained. The company’s goal is to have customers, accounts, devices and some of these core domain services facade with each other. Working with the ESB, the company has an effective intermediary to do this.

“In the ESB, behind the scenes, it’s talking to many different things like partners, existing services we have, and different vendors—this is what we’re heading towards and is in production now,” Brown said.

Account Aggregators is a new service that is currently in development and will go live soon, Brown noted. It will address the challenge of screen scraping, programmatic collection of visual data, which can often be a heavy process that requires aggregators to login, pretend to be a customer, go through and load Web resources. BarclaycardUS didn’t want these aggregators to take valuable processing away from its regular customers. With the WSO2 ESB, BarclaycardUS can have its aggregators support the OFX standard used by banks and boost performance.

“In the ESB, the aggregators are coming in and are authenticating themselves, and I’m loading all of this data at exactly the same time. So the aggregators were able to get the info off of our website, scraping it in a minute or two—this takes less than a second, around 900 milliseconds—we’ve loaded 100% of that customer’s information and given it to the aggregator,” Brown said.

He added, “We’re also using the throttle, so if they’ve indicated they won’t go above a certain threshold but there are multiple aggregators, we need to make it so they don’t accidentally go above that threshold.”

Investing in the Future

In addition to WSO2 ESB, BarclaycardUS takes advantage of WSO2 Governance Registry and WSO2 Business Activity Monitor. Looking ahead, Brown noted, the company plans to further enhance existing services and the use of coesb-logo-h42mposite services.

“The goal is to make this a cohesive API,” Brown greg-logo-h42explained. “We’re finding that we have a lot of services that had to be handwritten, which involves talking with bam-logo-h42our backend service providers and developers, and taking the time to test and deploy.”

BarclaycardUS plans to integrate the WSO2 Identity Server into its system to implement OAuth for RESTful services, which will be important for mobile applications. Additionally, the company is looking at the potential to leverage the WSO2 Complex Event Processor to help manage business operations and events streams and the WSO2 API Manager to gain insight into metering and monitoring of different service consumers.

“It sounds like we’re going to get exactly what we need with WSO2 in 2014, it’s a very cool product we’re going to be playing with more.”

For more information about how BarclaycardUS works with different backend service providers across 10 distinct environments using the WSO2 Carbon enterprise middleware platform, see Brown’s WSO2Con 2013 full presentation.

WSO2Con-US-2013-Powering-an-enterprise-with-messaging-and-APIs

New WSO2 API Manager introduces 2 industry firsts

I’m excited to announce the newest release of the WSO2 API Manager as it introduces two industry firsts. Featuring full native multi-tenancy, The WSO2 API Manager is:

  • The first API management product that can run on servers, in a private cloud, public cloud or hybrid cloud environment—all from the same software.

  • The first API management product that enables federated access to APIs across multiple entities, enabling new models for organizations to collaborate and monetize APIs.API manager logo

The 100% open source WSO2 API Manager offers an API Store, for IT organizations to set up their own Apple or Google Marketplace-like store where developers can easily subscribe to and consume APIs. And also provides API publishers with complete API lifecycle governance—from creating to publishing, deprecating and retiring APIs—as well as analytics and metrics to support decision-making and enforce service-level agreement (SLA) policies. Do download the latest version and let us know what you think.

You can also join Chris Haddad from WSO2 and guest presenter, API Evangelist Kin Lane, in akin lane Chriswebinar next week as they talk about API branding strategies. They will discuss  

  • Why you should create an API brand

  • What actions and presence influences API brand success

  • How to efficiently promote APIs through multiple branded API portals

I`m sure you would not want to miss out on this one!

– Sumedha Rubasinghe is a Senior Architect at WSO2 and leads the WSO2 API Manager team. He blogs at http://sumedha.blogspot.com

Forrester places WSO2 in top 2 for API Management

A few weeks ago, Forrester Research released The Forrester Wave: API Management Platforms, Q1 2013 report. The report’s findings were based on a 15-criteria evaluation of commercial and open source vendors that deliver products for the emerging API management platforms market, including API consumer experience, integration capabilities with various back-end and third-party systems, analytics and monitoring features.

We were thrilled that Forrester cited us as a leader in this report.  We believe that it validates our commitment to democratizing API management by making it affordable to acquire the software, easy to control APIs and manage the API lifecycle, and simple to find and subscribe to APIs. We have expanded on that commitment with significant enhancements in WSO2 API Manager 1.3 and in our continued evolution in enhancing the customer experience. (version 1.4 coming soon too!)

The WSO2 API Manager enables you to securely and confidently extend data, processes, and services out to customers, partners, and business units.  The enterprise-ready product transforms your cloud service or web service delivery by offering on-demand self-service API subscription, API lifecycle governance, key management, access provisioning, and API usage monitoring.
You can download the full report by visiting http://wso2.com/resources/analyst-reports/forrester-api-management-wave-2013/

Sumedha Rubasinghe,
Software architect and Data Technologies MC Chairperson
http://sumedha.blogspot.com