Nov 12, 2014

1. Nov 12, 2014 z Services API ManagementCreating new opportunities by extending customer “reach” by exposing z based core business functions as APIs Asit Dan z Services API Management, Chief Architect asit@us.ibm.com

2. API Opportunity Examples across Industries • Quote interest rate and Loan application • Checking room availability and reservation • Looking up an item at a store location and purchase Vision Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF) 2

3. API Opportunity 3 3

4. z Services APIM: Opportunity Vision Vision Creating new business opportunities by extending “reach” with APIs for accessing enterprise assets and/or with improved security and governance • Reaching new customers and markets with new applications and solutions accessing core (z based) business functions, through business partners • Improving user experience of existing customers and/or delivering new services with Mobile applications • Gaining more business control and insight over access to the enterprise services (e.g., for accountability & chargeback) while also improving visibility to z based services for the internal and external developers • simplifying access to z assets • Opportunity • z Customers have made a significant investment over a long period of time, in developing many valuable assets supporting core business functions (and core competencies) • Leverage these existing assets by exposing as APIs, improving both consumability and governance • Mobile, Cloud based or third-party applications can invoke these APIs for accessing core business functions APIM and z assets, fits like a glove: Many of the core business functions reside in z based services (CICS, IMS, WAS, TPF) 4

5. z Services APIM: Business challenges Vision Vision Why API Management? Business challenges addressed by APIM in exposing z based services/assets Enterprise Services Cloud-based Services On-Premise Enterprise APIs Mobile Applications Cloud APIs CICS IMS WAS TPF Mobile, Cloud and Third-party Applications invoking z Services using APIs • Consumability of the APIs is Key: • Easier creation and assembly of API from existing assets/services • Visibility of APIs to internal and external developers • Easier registration (by consuming applications) and set up including managing entitlement • Retaining business control (e.g., enforcing entitlement, accountability/chargeback) and gaining business insight in API invocation • Securing APIs using a secure GW from unwanted external invocations (mapping to application level security) and enforcing workload entitlement • Business Monitoring of API access in gaining business insight on the use of APIs by external applications, and for accountability/chargeback 5

6. z Services APIM: Business challenges Making APIs consumable requires publishing not just what business functions they perform but various additional details on their use, and easy to sign up • Listing and categorizing APIs for easy to find • Describing details on how to invoke an API An example public site listing its published APIs (similar to many others Twitter, Amazon, etc.) 6

7. IBM APIM Businesses are transforming themselves to participate in the API economy How do you rapidly and securely expose your business to this developer ecosystem? IBM API Management Expose business services securely as APIs to developer communities, and analyze API usage Provide self-service API portals to external/internal app developers Manage & monitor the entire API platform On-premise private Off-premise SaaS Off-premise private Hybrid

8. IBM APIM A single, comprehensive solution to design, secure, control, publish, monitor & manage APIs IBM API Management Fully on-premise, multi-tenant solution, for API providers Management Console API Manager Developer Portal IBM DataPower API Gateway for security, control, integration & optimized access to a full range of Mobile, Web, API, SOA, B2B & Cloud workloads Over a decade of innovation, 10,000+ units sold, 2000+ customer installations worldwide

9. IBM APIM secure Introducing IBM API Management:“A Complete API Management Solution” 1 Create, assemble and define an API 4 Manage growth & analyze results 3 Share with developers 2 Secure & scale the API 9

10. z Services APIM: Architecture and Capabilities zServices API End-to-End Architecture for Mobile, Cloud and Third-party Applications accessing z Assets/Services using APIs Enterprise Services Access to systems of records and enterprise data via APIs On-Premise API Management Create, Publish, Manage & Socialize APIs (IBM API Management) Mobile Applications Cloud-based Services CICS IMS WAS TPF APIM Communication with GW Security & Integration API Gateway (IBM DataPower Appliance) Cloud APIs Enterprise APIs 3. Mobile/Cloud App Enablement 1. Develop Services (Web or REST) 2. Develop Enterprise API s Enterprise Transaction Processing • Mobile/Cloud/Third-party Application Development • Invokes APIs for accessing SOR • API Management • Consumability by internal and external developers (creation and look up) • Entitlement Management (securing, workload enforcement) • Usage monitoring & Analytics • Service Enablement • Enables invocation of z applications by remote applications using standard protocols (WSDL, REST) • Converts SOAP or JSON into application specific (e.g., COBOL, PL/I) data and invokes applications Jane - Mobile app developer Uses APIs to access Back-End services Bob – developer of z based Services Develops services from CICS, IMS and other z applications Shavon – API developer Develops APIs from z based services 10

11. z Services APIM: Architecture and Capabilities JSON CICS TG CICS zServices API Discovery and invocation of System z based Services API Invocation System Z Enterpr ise Services Create, Publish, Manage & Socialize APIs (IBM API Management) Web Services Discovery services z/OS Connect WOLA based services REST Services WAS Liberty Security & Integration API Gateway IBM DataPower Appliance Web Services IMS SOAP Gateway On Premise API Management • Service Development Tool and Enablement Runtimes • Web Services CICS and IMS provides separate tools and runtimes; TPF provides runtime libraries • REST/JSON • CICS and IMS use common z/OS Connect runtime Discovery of z Services for API Development 1. Get a list of deployed services (Service Identification) - Filter based on technical and business service attributes 2. Get schema for a specific service (API Definition) 3. Get additional deployment details for a service (API Assembly) - e.g., security protocol support, invocation uri CICS 11

12. Call to Action • Leverage existing z assets by exposing as APIs • Reach out to z asset owners in exploring scenarios around the three entry points • Reach new customers and markets with new applications and solutions accessing core business functions, through business partners • Improve experience of existing customers and/or deliver new services with Mobile applications • Gain more business control and insight over access to the enterprise services, while improving consumability and simplifying access to z assets • Partner with z architects - both from the customer side and IBM – for designing an end-to-end solution architecture • Work with IBM through POC • Use IBM APIM and z product capabilities in developing API based solution • Identify/define incremental business scenarios, and try out through POCs 12

13. Thank You Questions and follow up – asit@us.ibm.com

14. API Management Resources • Product Page • ibm.com/apimanagement • API developer community • developer.ibm.com/api • Follow us on Twitter • @ibmapimgt • YouTube Channel • youtube.com/ibmapimanagement

15. APIM: Business challenges $ Leading Global Commercial Bank provides easy & secure access to key financial services • Business Challenge • Difficult for internal partners and developers to discover & access key financial services • Lacked a standard ecosystem to manage internal partners including global credit card companies and merchants • No visibility on Service consumption or ability to chargeback for LoB use of Services • Solution • IBM API Management & DataPower Gateway • Business Value • Offers 3rd party merchants secure standards-based access to key business services as APIs, with a self-service experience • Provides an internal ecosystem for partners and a central repository with usage analytics • Drives innovation for Mobile application development Example Apps 15

16. Large Airline in North America provides authorized access to flight services • Business Challenge • External business partners retrieve flight information by scraping the company’s website • Unauthorized access to full flight information , with no usage analytics • Delays in updating website – difficult for authorized partner to test changes • REST-based API had just been built but security was not in place Business Challenge • Solution • IBM API Management & DataPower • Business Value • Easily and securely connect company Website to new APIs, saving cost of building OAuth based secure access • Enable secure exposure of APIs to External Business Partners, saving the implementation cost of building a developer support infrastructure with access management • Ability to leverage existing investment in IBM DataPower gateway and internal team skillset • Enable secure Mobile app integration with Enterprise APIs

17. IBM APIM secure Physical infrastructure IBM API Management Secure, Control, Optimize Create, Manage, Socialize • DataPower XG45(With DIM) or XI50/B,XI52 and the AO Option • REQUIRED components • Physical or VE • Purchase new or re-use existing appliances • IBM API Management • 2 Hypervisor Installs

18. z Services APIM: Roles and Capabilities zServices API Roles and Development Tasks for enabling Mobile and Third-party Applications accessing Enterprise Assets • Bob • Creates enterprises services from existing z assets (CICS, IMS, WAS…) • Uses an asset specific tool to generate service deployment artifacts (e.g., bindfile, WSDL) starting with an existing asset, and deploys the generated artifacts in an appropriate runtime environment (e.g., z/OS Connect, CICS TS/TG, IMS SOAP GW) • Additionally, using an appropriate tool (e.g., CICS or IMS Explorer), explores asset details, and captures key service metadata for later understanding of its business function (such as, description of business function, business classification of this function,association of keywords, etc.) • May also publish this service to an external registry (e.g., WSRR or other existing registries in customer environments) • Shavon • Creates an API from an existing service, as well as various entitlement policies • Discovers deployed services from various back-end application environments in determining an appropriate service to expose - Queries existing services based on matching business functions (i.e., service metadata) - Navigates service list and views service description, other metadata and interface definition in understanding and selecting an appropriate service • Defines an API starting with the selected service interface - Defines API name, description and resource - Defines an appropriate transformations in mapping an API resource to an existing service interface definition - Defines various entitlement policies • May syndicate this API to multiple marketplaces (e.g., BlueMix) • Jane • Creates a mobile app invoking APIs • Navigates and views APIs using the developer portal • Develops app code invoking selected APIs 18

19. IBM API Management - Full control & deployment flexibility On-premise Private Off-premise SaaS Off-premise Private Hybrid • Customer-managed infrastructure • API Provider has full control to manage & scale the on-premise infrastructure • Create APIs & Plans, customize developer portals, publish to developer communities • IBM-managed infrastructure • Low entry cost • Pay-per-use • Highly elastic • API Provider has full control to create APIs & Plans, customize developer portals, publish to developer communities • Best of both worlds • Meet seasonal capacity without CapEx • Move APIs & Plans between public & private clouds • Create APIs & Plans, customize developer portals, publish to developer communities • API Provider-managed on IBM-hosted cloud • API Provider has full control to manage & scale the off-premise infrastructure • Create APIs & Plans, customize developer portals, publish to developer communities