ready-to-use soa governance for ibm websphere · soa software’s products provide ready-to-use soa...

32
Ready-to-Use SOA Governance for IBM WebSphere

Upload: others

Post on 17-Mar-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

Ready-to-Use

SOA Governance for

IBM WebSphere

Page 2: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 1

Table of Contents

1 Summary ....................................................................................................... 2

2 Introduction ................................................................................................... 3

3 Ready-to-Use SOA Governance Defined ............................................................. 5

4 Ready-to-Use SOA Governance Best Practices .................................................... 8

5 Platform Independent Governance Automation ................................................. 10

6 SOA Infrastructure Reference Model ................................................................ 12

7 Ready-to-Use SOA Governance System Elements: ............................................ 13

8 SOA Software’s Ready-to-Use SOA Governance Solution .................................... 14

9 Ready-to-Use SOA Governance for IBM WebSphere and IBM Rational .................. 16

10 About SOA Software ...................................................................................... 31

Page 3: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 2

1 Summary

SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM

WebSphere. This allows customers to confidently use IBM WebSphere products as part

of a heterogeneous enterprise SOA environment sharing services with other commercial

SOA platforms like SAP, Microsoft, Oracle, as well as RedHat and other open source

providers.

IBM WebSphere customers add SOA Software’s Ready-to-Use SOA Governance

Automation solution to the IBM WebSphere products to:

Ensure that services they identify, design and build using their WebSphere

products are relevant and consumable to applications they plan, design, build and

deploy using other technologies like Microsoft or Oracle, or buy from other

vendors like SAP.

Make services they expose from applications running on WebSphere products

visible to and compliant with enterprise policies defined, enforced and audited

across other platforms; and make services they design and build using other

platforms like Microsoft and open source environments visible to and compliant

with enterprise policies defined, enforced and audited across their WebSphere

applications.

Promote and ensure consistent alignment between demand from service

consumers and the supply of services through Consumer Contract Provisioning.

SOA Software™ provides a Ready-to-Use solution for SOA Governance. This solution is

one suite of products, built by one development team, with the expressed goal of

automating the flow of data through the governance process and maintaining a

consistent look and feel regardless of what state of governance you are engaged in. This

“Ready-to-Use” solution is unique to SOA Software in the market, as SOA Software focus

solely on the mission of bringing “Ready-to-Use” governance to customers using IBM

WebSphere middleware stacks at the core of their SOA runtime. Many vendors provide a

menu of technologies that can be aligned to various phases of the SOA Governance life

cycle, but disparate stand-alone tools need to be integrated by you [the customer] over

an extended period of time.

SOA Software – one suite of unified governance capabilities – Ready to Use for IBM

WebSphere.

SOA Software’s platform-independent Ready-to-Use SOA Governance Automation

solution promotes the use of best-practices throughout an enterprise SOA program

regardless of where services and consumers are designed, built, deployed and operated.

Portfolio Manager, Repository Manager, Service Manager and Policy Manager integrate

seamlessly with development and runtime products from most commercial platforms

including IBM, SAP, Microsoft, Oracle and Serena, as well as RedHat and other open

source providers. They offer deep integration with WebSphere Lombardi Edition,

WebSphere Process Manager, WebSphere Enterprise Service Bus, WebSphere

DataPower SOA Appliances, WebSphere Service Registry and Repository (WSRR),

WebSphere Message Broker, WebSphere Application Server, and IBM z/OS, as well as

the Rational suite of software development tools including ClearCase, ClearQuest,

Rational Team Concert, and RAD/RSM/RSA.

Page 4: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 3

2 Introduction

This whitepaper builds on the foundation created in SOA Software’s whitepaper “Unified

SOA Governance”, first published in December 2007. It describes how SOA Software’s

Portfolio Manager, Repository Manager, Service Manager and Policy Manager integrate

with a wide range of IBM WebSphere and Rational solutions to provide Ready-to-Use

SOA Governance automation capabilities, and the reasons why those capabilities are so

important.

Most customers have invested a significant amount of time and money in forging the

first iteration of their SOA architectures. They are (as expected) complex and often built

on an as needed basis. We are now at a point in the technology evolution of SOA that

many customers are looking to revamp their first pass at this agile business framework

– SOA v2.0. SOA v2.0 almost uniformly includes SOA Governance as a core

requirement. However, many vendors only provide a loosely coupled collection of

technologies that address the challenges of enterprise grade SOA governance.

Only SOA Software provides a complete – end to end – and “Ready to Use” SOA

Governance suite. Built by one team, with a common goal, common tooling and a

common look and feel, SOA Software’s SOA Governance suite is an ideal choice for IBM

WebSphere middleware customers. It offers pre-integrated components for use with

critical WebSphere technologies such as DataPower appliances, WebSphere Application

Server, WebSphere Message Broker, and others. SOA Software allows you to install the

suite and start governing your SOA architecture right away.

Some of the IBM WebSphere products include some platform-optimized SOA Governance

capabilities. This whitepaper explains what these capabilities are, and how SOA

Software’s products augment them to provide a true enterprise SOA Governance

automation solution.

This document describes the integration points and added governance capabilities for:

WebSphere Lombardi Edition - a unified business process management (BPM)

environment for collaborative process improvement

WebSphere Process Server – a high-performance business engine to help form

processes to meet business goals

WebSphere Enterprise Service Bus – provides Web services connectivity and JMS

messaging

WebSphere DataPower SOA Appliances – A set of purpose-built, easy-to-deploy

network devices that simplify, help secure, and accelerate XML and Web services

deployments

WebSphere Service Registry and Repository (WSRR) – helps publish, find, enrich,

manage and govern SOA services

WebSphere Message Broker – provides universal connectivity and transformation in

heterogeneous IT environments

WebSphere Application Server – the foundation of the IBM® WebSphere software

platform

Page 5: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 4

IBM z/OS – many of today’s critical business applications run on z/OS

Rational Application Developer/Rational Software Modeler/Rational Software

Architect – a leading Eclipse-based Integrated Development Environment (IDE)

Rational ClearCase – an enterprise-strength Software Configuration Management

(SCM) platform

Rational ClearQuest – IBM’s software defect tracking and change request platform

Rational Team Concert - a lean collaborative lifecycle management solution

Page 6: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 5

3 Ready-to-Use SOA Governance Defined

Ready-to-Use SOA Governance ensures the applicability, integrity and usability of a wide

range of assets through all their lifecycle stages from asset identification through

deprecation. The full lifecycle is split into planning governance, development

governance, and operational governance.

One of the key requirements of a modern SOA Governance solution is support for the full

governance life cycle. Many solutions address service development OR operational

governance – but those capabilities in isolation are not enough.

SOA Software supports all phases of the SOA Governance life cycle including service

planning, integration with development and development support tools, a full set of

operational governance, monitoring and analysis capabilities, and the ability to tie it all

together with a marketing leading collaboration portal and dashboard.

Plan, Build, Run and Share: The full SOA governance life cycle.

3.1 Planning Governance – Build the Right Things

Planning governance includes the identification analysis and modeling of candidate

services, policies, profiles, processes and information. An effective planning governance

tool manages an organization’s SOA portfolio while examining existing and planned

applications and determining which capabilities should be exposed as services, and

where applications would benefit from consuming shared services.

Planning Governance is a new area for SOA. It allows companies to build to plan, and

build to priority modeling current and desired architecture and identifying and

Page 7: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 6

prioritizing candidate services. Planning Governance solutions maximize the efficiency of

investment in SOA, solidifying the role of existing platforms as foundation service

providers.

I.T. has always struggled with balancing long term planning with addressing the

immediate and short term needs of the business, in most cases the short term

requirements take precedent over long range planning. When this is applied to

enterprise architecture, organizations end up with a bunch of services that deliver

minimal business value, instead of their goal of SOA.

Planning Governance allows organizations to identify potential services in a planned and

managed community including enterprise architects, business analysts and portfolio

managers. When utilizing planning governance, services can be proactively ‘built to plan’

rather than simply reacting and building single use services. This approach reduces the

risks of service deployment and facilitates Enterprise Architectural goals by avoiding

chaotic ‘service sprawl’.

Planning Governance solutions require integration with a wide range of existing

enterprise repositories, application portfolio management, and enterprise architecture

planning solutions, to harvest current and desired architectures. The output from the

Planning Governance process is a set of candidate services that feed into the

Development Governance process, and candidate policies feeding into the Policy

Governance process.

3.2 Development Governance – Build Things Right

Development governance marshals an asset through the development process that

typically spans the design, development, testing and staging phases of its software

development lifecycle. It typically includes a workflow mechanism to approve migration,

policy compliance validation, and a clear separation (logically, physically, or both)

between lifecycle stages. Development governance is the realm traditionally occupied

by registry and repository vendors, although it requires much stronger repository

capabilities and much broader integrations with development environments (IDEs and

SCMs tools), federation with other registries and much stronger service, standards and

taxonomy support than most repositories offer.

The Development Governance solution depends heavily on Policy Governance for

compliance policy definition, management, and validation. It uses policies to determine

the relevance, and suitability of services at each lifecycle stage, and to determine if

assets meet enterprise standards and guidelines before they can be promoted to the

next stage of the lifecycle. For example for a service to move from design to

development the enterprise may require that there is a design document in the

repository, the service has a WSDL, the services is categorized appropriately, and

perhaps even that there are registered consumers waiting for the service.

3.3 Operational Governance – Ensure What’s Built Behaves Right

Operational Governance controls the runtime aspects of SOA. It typically includes

service monitoring, security and management with a runtime policy system. Most Web

Services Management and Web Services Security vendors now position themselves as

providing Operational Governance solutions.

Page 8: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 7

The Operational Governance solution relies heavily on the Policy Governance solution for

discovery of policies for implementation and enforcement. A well architected

Operational Governance solution will fully abstract service consumers and providers from

the complexity of policy implementation and enforcement, service endpoint location,

transport, standards, message exchange pattern, and other impedances to

interoperability. It should provide agents, delegates, and a network resident

intermediary for service virtualization.

3.4 Policy Governance – Uniform Policy for All Governance Areas

Policy Governance defines and manages policies, associates them with various assets,

and validates and reports on policy compliance. It manages a wide range of different

policy types from metadata compliance policies applied in Planning and Development

Governance processes through security, reliability, and service-level policies applied

through an Operational Governance solution.

It is critical that the Policy Governance solution ensures consistent policy definition,

implementation, enforcement, validation, and audit through all stages of the lifecycle,

and across all distributed and mainframe platforms.

Page 9: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 8

4 Ready-to-Use SOA Governance Best Practices

Ready-to-Use SOA Governance promotes the core SOA governance best practices of:

4.1 Governance Automation

Governance Automation ensures scalability of enterprise processes implementing a

lifecycle management workflow to implement development approval processes,

integrated provisioning and lifecycle management, and inter-departmental contract

management and negotiation.

4.2 Uniform Policy Management

Uniform Policy Management ensures consistent policy definition, implementation,

enforcement, validation, and audit through all stages of the lifecycle, and across all

distributed and mainframe platforms. It ensures that services can be leveraged as first-

class citizens throughout an enterprise SOA by complying with enterprise policies that

are uniform across all platforms.

4.3 Metadata Federation

Metadata Federation provides seamless, heterogeneous SOA Governance and standards-

based support for governance automation (UDDIv3, WS-MEX, WS-Policy) to ensure that

governance processes are uniformly applied across all platform investments. When

metadata is federated and consistent across multiple governance platforms, the business

value of service (cost, usage, production issues) becomes visible and measurable across

the enterprise service lifecycle.

4.4 Service Virtualization

Service Virtualization provides location-transparency, service mobility, impedance

tolerance and reliable service delivery without requiring a re-platforming of existing

platforms or introducing yet another service platform to support the required solution

architecture.

4.5 Trust and Management Mediation

Trust and Management Mediation ensures interoperability across disparate partners and

platforms, trust enablement and trust mediation complementing threat prevention

systems. It provides provide last-mile security, metric collection and reporting, SLA

monitoring and management, to ensure that services are governed, managed, and

secured, and policy implementation and mediation to allow consumers to communicate

with a wide range of mission critical business services exposed from any platform.

4.6 Continuous Compliance and Validation

Continuous Compliance and Validation ensures consistent policy implementation and

enforcement across all stages of the lifecycle, preserving the fidelity of the governance

models, structures and mechanisms supporting enterprise SOA programs and ensure the

relevance, applicability and suitability of services.

Page 10: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 9

4.7 Change Impact Mitigation

Change Impact Mitigation provides change management and impact analysis processes

integrated with the governance workflow to ensure that changes to services or other

assets don’t cause major outages by breaking the consumption model.

4.8 Consumer Contract Provisioning

Consumer Contract Provisioning provides offer, request, negotiation and approval

workflows for service access, capacity, SLA and policy contracts. It ensures that the

service provides know which applications and users are consuming their services and

allows them to treat different consumers with different priorities and service levels.

Page 11: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 10

5 Platform Independent Governance Automation

Much of the benefit of SOA is derived from the promise of seamless interoperability

between platforms, with applications built using .NET and WCF consumer services

exposed from COTS, Mainframe, or Java applications. One of the core goals of SOA

Governance is to ensure that services are relevant and consumable between platforms.

As such it makes no sense to leverage governance capabilities built into the platforms

themselves, as this simple promotes silos of services within platform domains.

5.1 Platform Governance Models

Not all platforms are governable; in fact platforms fall into one of 3 categories:

Ungoverned Platforms – the purest form of Informal Governance. This often

results in “Random SOA” or “Accidental SOA”. This includes any container that

doesn’t support policy enforcement natively or with an agent

Self-Governed Platforms – a mixture of Formal and Informal. Some tasks and

activities are governed, some are not. SOA Governance is as weak as the

weakest link in the chain. This category includes containers that use their own

tooling without policy integration with a centralized enterprise SOA Governance

solution.

Governed Platforms – a real or virtual organization exists that is devoted to the

promotion of SOA programs and causes that is accepted as a fundamental part of

an SOA culture. Governed Service Platforms have:

Clear job titles / responsibility support SOA Governance activities

Supports clear separation between implementation activities and governance

activities

Provides standards-based governance integration interfaces

Ready-to-Use SOA Governance solutions integrate seamlessly with the platforms

providing varying degrees of configuration, policy implementation and enforcement,

message handling, and workflow support, largely depending on the level of

sophistication of the platform itself.

Page 12: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 11

We divide governed platforms into two categories:

5.2 Governed Service Platforms

All applications that expose and consume services at runtime are service platforms.

These include application servers like IBM WebSphere, Microsoft IIS, Oracle WebLogic,

JBoss and others; ESBs from vendors including IBM, Microsoft, Oracle, JBoss, TIBCO and

others; mainframe applications running in CICS and IMS; COTS applications like CICS;

and SaaS environments like Salesforce.com and Amazon.

As described above, Governed Service Platforms offer standards-based governance

integration interfaces, and support the concepts of governance by an external enterprise

governance system.

5.3 Governed Development Platforms

Most platform vendors provide an integrated development environment (IDE), source

code management and version control system, defect tracking/change request tooling,

and in many cases, a document management and/or asset management repository. An

Ready-to-Use SOA Governance solution can provide asset lifecycle management and

policy compliance capabilities to ensure that developed software assets (such as

services, components and applications) are appropriate and relevant to the enterprise,

and that they comply with applicable policies.

Governed Development Platform status means that the development platform integrates

with a Ready-to-Use SOA Governance solution to make and share decisions about assets

and artifacts.

Page 13: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 12

6 SOA Infrastructure Reference Model

SOA Infrastructure is the set of tools and technologies that an organization deploys to

secure and manage services and service-oriented business applications. It provides the

delivery mechanism for a comprehensive governance solution including Registry,

Repository, Management, and Security services, and intermediaries to ensure the

application and use of these services.

The SOA Infrastructure reference model shown above is published by SOA Software, the

leading provider of SOA Infrastructure software products. It provides a product and

vendor agnostic view of the concepts, components and standards that make up a

successful SOA Infrastructure.

Page 14: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 13

7 Ready-to-Use SOA Governance System Elements:

The core elements of the Ready-to-Use SOA Governance system are the Planning and

Development Repository and Registry, Policy Management System, Virtualization

System, Management and Security System, and their associated intermediaries. Also, as

described above, governance products and systems not having deep integration between

these elements would offer minimal value to an SOA implementation.

7.1 SOA Repositories

The SOA Repositories provides solutions for the governance of planning and

development assets and artifacts. Governance in this context includes registration,

lifecycle management, planning, design-time, and run-time policy invocation, and

business value visibility. The repository implements registry standards for metadata

exchange. It is the main source of SOA information for end users and applications.

7.2 SOA Policy Management System

The SOA Policy Management System provides a framework for defining and managing

policies that are enforced throughout the planning, lifecycle, and operational governance

processes. It ensures that policies are applied uniformly across all governed and

governable platforms.

7.3 SOA Registry

The SOA Registry supports the categorization, classification, tagging, and publication of

services. It provides browse and search interfaces for service discovery, a publication

interface for service registration, and a subscription interface for synchronization with

other registries and repositories.

7.4 SOA Management System

An SOA Management solution monitors and manages the reliability, availability and

performance of services.

7.5 SOA Security System

An SOA Security solution provides service and message security capabilities including

authentication (identity assertion and token exchange), authorization, privacy, non-

repudiation and audit.

7.6 SOA Intermediaries

SOA intermediaries exist in a number of forms, the most important of which are stand-

alone (proxy/router), and agent (embedded in container). Intermediaries enforce and

implement policy for Management and Security solutions. The primary role of the agent

intermediary is to ensure last-mile policy enforcement, while the primary role of the

stand-alone intermediary is to provide service virtualization to isolate consumers from

service location, policy, implementation, and change.

Page 15: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 14

8 SOA Software’s Ready-to-Use SOA Governance Solution

SOA Software builds its Integrated SOA Governance solution around its Policy

Manager™, Repository Manager™, and Service Manager™ products for SOA Policy Governance, Development Governance, and Operational Governance.

SOA Software’s Portfolio Manager™, Repository Manager™, Policy Manager™, and

Service Manager™ combine to form a comprehensive Integrated SOA Governance

Automation solution.

Portfolio Manager™ is an innovative Planning Governance product that helps ensure the

alignment of SOA Programs with strategic IT investment and business objectives and

makes sure that enterprises build the right services at the right time. It helps

customers identify candidate services and build an SOA roadmap through SOA Modeling,

Asset Identification, and a Portfolio Management process. To achieve these goals

Portfolio Manager functions as part of a Ready-to-Use SOA Governance automation suite

with seamless integration with Repository Manager™ and Policy Manager™.

Repository Manager™ provides an advanced software development asset (SDA)

repository, lifecycle management, and metadata federation solution. It governs leading

development platforms, ensuring consistent definition and management of services and

other assets across all development environments. Repository Manager supports

advanced SDA repository and governance capabilities including the ability to define and

manage custom asset and artifact types, asset relationship management, integrated

development environment (IDE) integration, and comprehensive asset federation. It

integrates seamlessly with Policy Manager where policy decisions are required in the

Development Governance process, as well as provisions service consumption

agreements made by developers to Policy Manager for further governance. Repository

Manager supports application development and architecture teams, providing a

comprehensive Development Governance solution.

Page 16: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 15

Service Manager™ automatically implements and enforces policies from Policy Manager.

It generates usage, performance and policy compliance metrics that it reports to Policy

Manager so that it can audit that policies are being enforced in a closed-loop process.

Service Manager support SOA and enterprise operational management functions,

ensuring that services are security, reliable, and meet the performance goals for each

consumer.

Policy Manager™ provides an SOA Registry/Repository and comprehensive SOA Policy

Governance solution, with powerful governance automation capabilities. Governance

automation minimizes the overhead associated with governance processes, and turns

governance from a painful workload, into a productivity tool. Policy Manager includes a

built-in policy and service metadata repository supporting its policy governance

processes. Policy Manager supports enterprise and SOA architecture functions, ensuring

consistent application of policies throughout an enterprise SOA program. Using this

solution architects, developers, security administrators, and operations managers can

define and govern policies that are applied to services throughout the appropriate stages

of their lifecycle.

Using this solution architects, developers, security administrators, and operations

managers can define and govern policies that are applied to services throughout the

appropriate stages of their lifecycle.

Page 17: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 16

9 Ready-to-Use SOA Governance for IBM WebSphere and IBM Rational

IBM offers several SOA Governance products in its SOA product portfolio. Most notable

are WebSphere Service Registry and Repository, IBM Tivoli CAM for SOA (IT CAM for

SOA), and Tivoli Security Policy Manager. These products are platform optimized for the

IBM product family, and are extended by an enterprise Ready-to-Use SOA Governance

Automation solution.

IBM customers are adding SOA Software’s Portfolio Manager, Repository Manager,

Service Manager and Policy Manager to provide Ready-to-Use SOA Governance

Automation for their IBM platform to provide a number of solutions:

Uniform lifecycle and policy governance across existing platform investments

Ensure interoperability with other platforms

Seamless, heterogeneous SOA Governance, Security and Management

integration with IBM Middleware infrastructure

Performance and reliability management

Interoperability across disparate partners and platforms

Integrated provisioning and lifecycle management

Inter-departmental consumer contract provisioning and negotiation

Standards support for Governance automation (UDDIv3, WS-MEX)

Trust enablement and trust mediation complementing IBM’s threat prevention

systems

SOA Software’s products support and promote common Ready-to-Use SOA Governance

best practices, and enable the consistent execution of these best practices with the IBM

platform. They offer the added benefit that there is no requirement to introduce another

non-IBM platform in order to support the required architecture.

Using Portfolio Manager, Repository Manager, Policy Manager and Service Manager, SOA

Software certifies IBM’s products as Governed Service Platforms, or in the case of

WSRR, a Governed Service Repository. Certified Governed Service Platform status

means that customers can be confident that their platforms will preserve the fidelity of

Page 18: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 17

the governance models, structures and mechanisms supporting an enterprise SOA

program.

IBM offers products supporting numerous aspects of software development, including

software configuration management (Rational ClearCase), defect tracking and change

request management (Rational ClearQuest) and many others. IBM also provides a

leading Eclipse-based Integrated Development Environment (IDE) – Rational Application

Developer (RAD), providing software engineers core development tools and integrated

access to the above-mentioned underlying development systems of record. SOA

Software’s Repository Manager establishes a Governed Development Platform

environment over these and many other development systems of record. Certified

Governed Development Platform status ensures that these development systems of

record serve as coherent and consistent sources of software asset metadata and

artifacts feeding into the IT organization’s SOA development governance processes.

Repository Manager automates the gathering and collection of this information and

presents it to key SDLC stakeholders throughout the development governance lifecycle.

SOA Software’s products offer a comprehensive Ready-to-Use SOA Governance

Automation solution for IBM:

9.1 WebSphere Process Manager

From IBM’s product description: http://www-306.ibm.com/software/integration/wps/

IBM® WebSphere® Process Manager is unified BPM platform combining the WebSphere

Process Server BPM and WebSphere Lombardi Edition, and related products. This

product is a high-performance business engine to help form processes to meet business

goals.

It enables customers to respond faster than their competitors, allowing them to provide

their customers with the service and products that differentiate them from the pack.

Process Server:

Orchestrates the assets of your business to form highly optimized and effective

processes to meet your business goals, whether you need to automate processes

in the factory, process claims and financial payments, execute an efficient supply

chain, or ensure compliance with the latest industry regulations.

Ensures interoperability and flexibility as part of your service oriented

architecture (SOA) through adoption of popular standards, such as BPEL, Web

services, JMS, XML, and many more.

Uses WebSphere Integration Developer, providing a developer experience that is

second to none. One tool, one set of skills enables you to orchestrate processes,

construct mediations between services, and truly integrate the capabilities

previously locked away in your packaged business applications.

Contains WebSphere Enterprise Service Bus, which mediates disparate resources,

maximizing reuse of your assets wherever they are — irrespective of vendor,

platform, or whether they are home-grown or packaged applications.

9.1.1 Governance Automation Model

SOA Software has certified IBM WebSphere Process Server as a Governed Service

Platform. This allows customers to use WebSphere Process Server to implement and

enforce governance policies for enterprise services.

Page 19: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 18

SOA Software’s Portfolio Manager, Repository Manager, Service Manager and Policy

Manager ensure that WebSphere Process Server can facilitate and benefit from the core

Ready-to-Use SOA Governance Automation best practices:

Trust & Management Mediation – provide last-mile security, metric collection and

reporting, SLA monitoring and management, to ensure that services exposed by

WebSphere Process Server are governed, managed, and secured. Provide policy

implementation and mediation to allow WebSphere Process Server to

communicate with a wide range of mission critical business services exposed

from non-IBM platforms.

Service Virtualization – conveniently make WebSphere Process Server services

available to partners and allow it to consume partner services

Governance Automation – automate the publishing of WebSphere Process Server

services, providing lifecycle workflow with approvals, collaboration services, and

consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of WebSphere Process Server services

Metadata Federation - ensure that WebSphere Process Server services are visible

to, relevant, and consumable by other platforms – and make services from other

platforms visible to, relevant and consumable by WebSphere Process Server.

Automatically discover services in Process Server and publish them into Policy

Manager subject to governance policies

Change Impact Mitigation - make sure that changes to WebSphere Process

Server services don’t cause major outages by breaking consumers

Uniform Policy Management - ensure that WebSphere Process Server services

can be leveraged as first-class citizens throughout an enterprise SOA by

complying with enterprise policies that are uniform across all platforms

SOA Software provides a fully functional Agent for Process Server. The Agent deploys

into the container hosting Process Server and provides a management application, a

policy engine, and a handler mechanism. The management application monitors Process

Server’s management API for new services. When it discovers a new service, depending

on its policies it will either automatically install a Process Server primitive into the

process to intercept messages for processing by the policy engine, or simply register the

service with Policy Manager. The policy engine uses WS-MetadataExchange and WS-

Policy to discover its policies using from Policy Manager, and reports metrics, usage, and

exceptions to Policy Manager over standard-based protocols.

SOA Software also provides a fully functional Delegate in the form of a Process Server

primitive. The Delegate deploys into Process Server processes to abstract them from

the location, transport and other policy representations of consuming services.

9.2 WebSphere Enterprise Service Bus

From IBM’s product description: http://www-306.ibm.com/software/integration/wsesb/

IBM® WebSphere®Enterprise Service Bus applies Web services connectivity and JMS

messaging, improving flexibility through the adoption of service-oriented interfaces. It:

Page 20: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 19

Provides a smart approach to SOA, delivering a standards-based connectivity and

integration solution that allows you to create and deploy interactions quickly and

easily between applications and services, with a reduced number and complexity

of interfaces.

Offers easy-to-use tools that require minimal programming skills and is simple to

install, configure, build and manage.

Supports hundreds of ISV solutions via WebSphere Adapters.

Provides leadership in SOA standards for service composition, mediation, and

hosting.

Increases business agility and flexibility extending easily to a Federated ESB

model.

Re-configures dynamically to meet changing business processing loads. Provides

easy interactions with any JMS and HTTP applications.

Integrates seamlessly with the WebSphere platform as well as products within

the IBM SOA Foundation, such as IBM Tivoli Composite Application Manager for

SOA.

9.2.1 Governance Automation Model

WebSphere ESB provides the supporting infrastructure for Process Server, and so the

Governance Automation Model for WESB is very similar to that for Process Server.

SOA Software has certified IBM WebSphere Enterprise Service Bus as a Governed

Service Platform. This allows customers to use WebSphere Enterprise Service Bus to

implement and enforce governance policies for enterprise Web services providing

reporting data to enable a closed-loop audit process as part of their enterprise SOA.

SOA Software’s Portfolio Manager, Repository Manager, Service Manager and Policy

Manager ensure that WebSphere Enterprise Service Bus can facilitate and benefit from

the core Ready-to-Use SOA Governance Automation best practices:

Uniform policy enforcement for WMB/WESB hosted services

Endpoint security without programming

Centralized PKI based identity for service providers

Trust & management mediation – provide last-mile security, metric collection and

reporting, SLA monitoring and management, to ensure that services exposed by

WebSphere Enterprise Service Bus are governed, managed, and secured.

Provide policy implementation and mediation to allow WebSphere Enterprise

Service Bus to communicate with a wide range of mission critical business

services exposed from any platform.

Service virtualization - safely make WebSphere Enterprise Service Bus services

available to partners and consume partner services

Governance Automation – automate the publishing of WebSphere Enterprise

Service Bus services, providing lifecycle workflow with approvals, collaboration

services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of WebSphere Enterprise Service Bus services

Metadata federation - ensure that WebSphere Enterprise Service Bus services are

visible to, relevant, and consumable by other platforms – and make services from

other platforms visible to, relevant and consumable by WebSphere Enterprise

Page 21: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 20

Service Bus. Automatically discover services in Enterprise Service Bus and

publish them into Policy Manager subject to governance policies

Change impact mitigation - make sure that changes to WebSphere Enterprise

Service Bus services don’t cause major outages by breaking consumers

Uniform policy management - ensure that WebSphere Enterprise Service Bus

services can be leveraged as first-class citizens throughout an enterprise SOA by

using policies that are uniform across all platforms

SOA Software provides a fully functional Agent for WebSphere Enterprise Service Bus.

The Agent deploys into the container hosting the Enterprise Service Bus and provides a

management application, a policy engine, and a handler mechanism. The management

application monitors Enterprise Service Bus’s management API looking for new services.

When it discovers a new service it will, depending on its policies, automatically install an

Enterprise Service Bus primitive into the application to intercept messages for

processing by the policy engine. The policy engine discovers its policies using WS-

MetadataExchange and WS-Policy from Policy Manager and reports metrics, usage, and

fault data back to Policy Manager.

SOA Software also provides a fully functional Delegate in the form of an Enterprise

Service Bus primitive. The Delegate deploys into Enterprise Service Bus applications to

abstract them from the location, transport and policy complexities of consuming

services.

9.3 WebSphere DataPower SOA Appliances

From IBM’s product description: http://www01.ibm.com/software/integration/datapower

IBM® WebSphere® DataPower SOA Appliances represent an important element in IBM's

holistic approach to Service Oriented Architecture (SOA). IBM SOA appliances are

purpose-built, easy-to-deploy network devices that simplify, help secure, and accelerate

your XML and Web services deployments while extending your SOA infrastructure. These

new appliances offer an innovative, pragmatic approach to harness the power of SOA

while simultaneously enabling you to leverage the value of your existing application,

security, and networking infrastructure investments.

DataPower appliances are rack mountable network devices capable of transforming

between disparate message formats, including binary, legacy, and XML, and providing

message routing and security. These appliances can be used for cost-effective XML

enablement of mainframes, wire speed enterprise message buses, and enterprise

application integration.

They can also be used for a comprehensive set of functions including WS-Security, XML

encryption, XML/SOAP firewall filtering, XML digital signatures, XML schema validation,

two-way SSL, XML access control, XPath, and detailed logging. The appliances come in a

variety of models including the XI50.

9.3.1 Governance Automation Model

SOA Software has certified the set of IBM® WebSphere® DataPower SOA Appliances as

Governed Service Platforms with the release of the SOA Software Policy Manager for IBM

WebSphere DataPower. This product allows customers to use the IBM® WebSphere®

Page 22: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 21

DataPower SOA Appliances to implement and enforce governance policies for enterprise

Web services.

SOA Software’s Policy Manager for IBM WebSphere DataPower ensures that IBM®

WebSphere DataPower SOA Appliances can facilitate and benefit from the core Ready-

to-Use SOA Governance Automation best practices:

Automate service provisioning to DataPower

Centralized policy management and authoring

Service level monitoring, analysis and alerting

Simplified authentication & authorization through service contract management

Define central SLA policies and automatically distribute to pools of appliances

Trust & management mediation – provide, metric collection and reporting, SLA

monitoring and management, to preserve the fidelity of their governance models

and structures. Define and govern the lifecycle and mediation of virtualization

policy allowing the IBM® WebSphere® DataPower SOA Appliances to virtualize a

wide range of mission critical business services exposed from any platform.

Service virtualization – publish virtual services to the IBM® WebSphere®

DataPower SOA Appliances as part of an Ready-to-Use SOA Governance

Automation solution

Governance Automation – automate the publishing of the IBM® WebSphere®

DataPower SOA Appliance services, providing lifecycle workflow with approvals,

collaboration services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of services published by the IBM® WebSphere® DataPower SOA

Appliances

Metadata federation - ensure that services published to the IBM® WebSphere®

DataPower SOA Appliances are visible to, relevant, and consumable by other

platforms

Change impact mitigation - make sure that changes to services published to the

IBM® WebSphere® DataPower SOA Appliances don’t cause major outages by

breaking consumers.

Uniform policy management - ensure that the policies enforced by the IBM®

WebSphere® DataPower SOA Appliances are authored in a centralized registry

repository and uniform across all platforms including DataPower.

SOA Software’s Policy Manager for IBM WebSphere DataPower can govern the behavior

of the IBM® WebSphere® DataPower SOA Appliances by publishing virtual services to

them, and specifying policies for those virtual services. These policies are specified

using WS-Policy, and discovered using WS-MetadataExchange. The IBM® WebSphere®

DataPower SOA Appliances report metrics, usage, and fault data to Policy Manager

according to the policies specified for published services.

9.4 WebSphere Service Registry and Repository

From IBM’s product description: http://www-306.ibm.com/software/integration/wsrr/

WSRR is an industrial-strength tool that enables you to publish, find, enrich, manage

and govern services in enterprise SOA.

Page 23: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 22

Enable enterprise SOA governance of your services throughout the service

lifecycle.

Promote reuse and eliminate redundancies by increasing visibility of services,

applications and processes.

Enhance connectivity by increasing runtime flexibility of applications integrated

using the Enterprise Service Bus (ESB).

Optimize the use of services in SOA by exchanging rich service information with

runtime monitoring tools and operational data stores.

Enable governance and life-cycle management of your high-value applications,

such as WebSphere MQ, CICS and IMS.

Adopt SOA incrementally by using WebSphere Service Registry and Repository to

start your SOA small and grow as needed.

9.4.1 Governance Automation Model

SOA Software has certified IBM® WebSphere® Service Registry and Repository (WSRR)

as a Governed Service Repository. This allows customers to use WSRR as a federated

repository within a Ready-to-Use SOA Governance solution as part of their enterprise

SOA.

SOA Software’s Portfolio Manager, Repository Manager and Policy Manager can ensure

that WSRR can facilitate and benefit from the lifecycle governance best practices driven

by Ready-to-Use SOA Governance Automation:

Enhance WSRR’s run time registry with unified planning, development and policy

governance

Automate the flow of service definition and policy to WSRR from multiple

environments

Integrates non-IBM technologies into service life cycle

Governance Automation – automate the publishing of the IBM® WebSphere®

enterprise services, providing lifecycle workflow with approvals, collaboration

services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of services published in the IBM® WebSphere® Service Registry and

Repository

Metadata federation - ensure that WebSphere services published in WSRR are

visible to, relevant, and consumable by other platforms, and that services

published by other platforms are visible to, relevant, and consumable by IBM

products via WSRR

Change impact mitigation - make sure that changes to services published in

WSRR don’t cause major outages by breaking consumers

Uniform policy management - ensure that the IBM® WebSphere® platform can be

leveraged as a first-class citizen throughout an enterprise SOA by using policies

that are uniform across all platforms distributed via WSRR

SOA Software’s Portfolio Manager and Repository Manager can federate with the IBM®

WebSphere® Service Registry and Repository. It can synchronize selected services,

WSDLs, interfaces, schemas, and taxonomies to ensure consistency between Portfolio

Manager, Repository Manager, Policy Manager and WSRR. The integration extends the

Policy Manager contract provisioning, compliance policy and workflow models to provide

Page 24: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 23

consumer contract provisioning and lifecycle governance compliance and workflow

capabilities to assets published in WSRR.

9.5 WebSphere Message Broker

From IBM’s product description:

http://www306.ibm.com/software/integration/wbimessagebroker/

IBM® WebSphere® Message Broker provides universal connectivity and transformation in

heterogeneous IT environments.

It distributes information and data generated by business events in real time to people,

applications, and devices throughout your extended enterprise and beyond. Message

Broker:

Provides a smart approach to SOA, extending the reach of your business beyond

your firewall by supporting a broad range of multiple transport protocols and data

formats

Integrates multiple applications, networks, and device types using a platform-

independent based enterprise service bus that lets you conduct business reliably

and securely

Increases business agility and flexibility, extending easily to a Federated ESB

model, while reducing development costs by separating integration logic from

applications

Improves the flow of information around the business, moving away from hard-

coded point-to-point links to more flexible distribution mechanisms such as

publish/subscribe and multi-cast

Uses a simple programming model for connectivity and mediation, including a

robust set of pre-built mediation function and ways to customize mediations

Exploits the industry-leading WebSphere MQ messaging infrastructure, and

supports transformation options with graphical mapping, Java, ESQL, XSL, and

WebSphere Transformation Extender

Delivers extensive administration and systems management facilities for

developed solutions

9.5.1 Governance Automation Model

SOA Software has certified IBM WebSphere Message Broker as a Governed Service

Platform. This allows customers to use WebSphere Message Broker to implement and

enforce governance policies for enterprise Web services.

SOA Software’s Policy Manager and Service Manager ensure that WebSphere Message

Broker can facilitate and benefit from the core Ready-to-Use SOA Governance

Automation best practices:

Uniform policy enforcement for WMB/WESB hosted services

Endpoint security without programming

Centralized PKI based identity for service providers

Trust & management mediation – provide last-mile security, metric collection and

reporting, SLA monitoring and management, to make services exposed by

WebSphere Message Broker business-class. Provide policy implementation and

mediation to allow WebSphere Message Broker to communicate with a wide

range of mission critical business services exposed from any platform.

Page 25: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 24

Service virtualization - safely make WebSphere Message Broker services available

to partners and consume partner services

Governance Automation – automate the publishing of WebSphere Message

Broker services, providing lifecycle workflow with approvals, collaboration

services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of WebSphere Message Broker services

Metadata federation - ensure that WebSphere Message Broker services are visible

to, relevant, and consumable by other platforms – and make services from other

platforms visible to, relevant and consumable by WebSphere Message Broker

Change impact mitigation - make sure that changes to WebSphere Message

Broker services don’t cause major outages by breaking consumers

Uniform policy management - ensure that WebSphere Message Broker services

can be leveraged as first-class citizens throughout an enterprise SOA by using

policies that are uniform across all platforms

SOA Software provides a set of custom nodes for the WebSphere Message Broker Toolkit

palette. These nodes can be dragged and dropped into the appropriate points in a

process flow and provide the full functionality of the Agent for last-mile policy

enforcement, and the Delegate for first-mile policy implementation.

9.6 WebSphere Application Server

From IBM’s product description:

http://www306.ibm.com/software/webservers/appserv/was/

WebSphere® Application Server is the foundation of the IBM® WebSphere software

platform. It delivers the secure, scalable, resilient application infrastructure you need

for a Service Oriented Architecture (SOA). WAS allow customers to:

Simplify the way they consume WebSphere Application Server with new Feature

Packs. You can download the latest open standards and technical innovations you

need today.

Leverage the industry's premier Java™ 2 Enterprise Edition (J2EE™) 1.4 and Web

services application platform to help build, run, integrate and manage dynamic,

On Demand business applications.

Build and deploy re-usable application services quickly and easily, with a simple

set of tools and interfaces.

Run services in a reliable, scalable, highly available, environment to ensure

business opportunities are not lost due to application downtime.

Secure applications and data with a resilient, standards-based security

infrastructure that will remove vulnerable threats while maximizing developer

productivity.

Reuse software assets and extend their reach with standards-based messaging

and the latest Web services standards, and manage applications effortlessly with

powerful, easy-to-use tools for administration and monitoring.

Grow as needs evolve, leveraging core assets and skills, with hundreds of IBM

and Business Partner products built on top of WebSphere Application Server.

Page 26: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 25

9.6.1 Governance Automation Model

SOA Software has certified IBM WebSphere® Application Server as a Governed Service

Platform. This allows customers to use WebSphere Application Server to implement and

enforce governance policies for enterprise Web services providing reporting data to

enable a closed-loop audit process as part of their enterprise SOA.

SOA Software’s Policy Manager and Service Manager ensure that WebSphere®

Application Server can benefit from the core Ready-to-Use SOA Governance Automation

best practices:

Trust & management mediation – provide last-mile security, metric collection and

reporting, SLA monitoring and management, to make services exposed by

applications running in WebSphere Application Server business-class. Provide

policy implementation and mediation to allow applications running in WebSphere

Application Server to communicate with a wide range of mission critical business

services exposed from any platform.

Service virtualization - allow applications running in WebSphere Application

Server available to safely expose services to partners and consume partner

services

Governance Automation – automate the publishing of services exposed by

applications running in WebSphere Application Server, providing lifecycle

workflow with approvals, collaboration services, and consumer contract

provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of services exposed and consumed by applications running in

WebSphere Application Server

Metadata federation - ensure that services exposed by applications running in

WebSphere Application Server are visible to, relevant, and consumable by other

platforms – and make services from other platforms visible to, relevant and

consumable by applications running in WebSphere Application Server.

Automatically discover services in exposed by WebSphere Application Server

applications and publish them into Policy Manager subject to governance policies

Change impact mitigation - make sure that changes to services exposed by

applications running in WebSphere Application Server don’t cause major outages

by breaking consumers

Uniform policy management - ensure that services exposed and consumed by

applications running in WebSphere Application Server are enterprise SOA first-

class citizens by using policies that are uniform across all platforms

Rogue Service Discovery – automatically discover services deployed into

WebSphere Application Server to prevent the undetected deployment of rogue

services that have intentionally (or unintentionally) bypassed the service lifecycle

publication and consumer contract provisioning governance processes

SOA Software provides a fully functional Agent for WebSphere Application Server. The

Agent deploys as an application into the container providing a management application,

a policy engine, and a handler mechanism. The management application monitors

WebSphere Application Server’s management API looking for new services. When it

discovers a new service it will, depending on its policies, automatically install an

Page 27: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 26

appropriate handler (JAXRPC or servlet filter) into the application to intercept messages

for processing by the policy engine. The policy engine discovers its policies using WS-

MetadataExchange and WS-Policy from Policy Manager and reports metrics, usage, and

fault data back to Policy Manager.

SOA Software also provides a fully functional delegate in the form of an AXIS pivot

handler and a Java SDK. The delegate deploys into WebSphere Application Server

applications to abstract them from the location, transport and policy complexities of

consuming services.

9.7 IBM z/OS

From IBM’s product description: http://www-03.ibm.com/systems/z/os/zos/overview/

z/OS is a highly secure, scalable, high-performance enterprise operating system on

which to build and deploy Internet and Java-enabled applications, providing a

comprehensive and diverse application execution environment.

Many of the world’s largest companies rely on z/OS for core enterprise computing and

data management. A lot of these companies will make their first steps to SOA by

exposing business logic from z/OS as Web services.

Once Y2K came and went without a computing apocalypse, companies with a significant

commitment to mainframe computing (Gartner defines a significant commitment as

more than 1000 MIPS) changed their focus from moving applications away from the

mainframe, to finding ways to better leverage the security, stability, and performance of

their mainframe environments. At the same time these companies began to face the

challenge of figuring out how to share business logic and data between the mainframe

and their emerging distributed computing environments. SOA and Web services provide

an ideal solution. Companies can expose core data and transaction services from the

mainframe, and can allow mainframe applications to consume services from the

distributed world.

Of course, with this evolution to service-oriented computing on the mainframe comes a

set of governance requirements to ensure that mainframe applications can preserve the

fidelity of enterprise governance models and structures, and that enterprise SOA can

preserve the integrity and fidelity of the mainframe applications’ governance models and

structures.

9.7.1 Governance Automation Model

SOA Software’s SOLA product turns z/OS with CICS and/or IMS into a Governed Service

Platform. This allows customers to expose and consume services from CICS and/or IMS

applications using SOLA to implement and enforce governance policies for enterprise

Web services providing reporting data to enable a closed-loop audit process as part of

their enterprise SOA.

SOLA integrates with SOA Software’s Portfolio Manager, Repository Manager, Service

Manager and Policy Manager to ensure that z/OS and CICS and/or IMS can benefit from

the core Ready-to-Use SOA Governance Automation best practices:

Trust & management mediation – SOLA provides last-mile security, metric

collection and reporting, SLA monitoring and management, to make services

Page 28: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 27

exposed by z/OS and CICS and/or IMS applications business-class. It provides

policy implementation and mediation to allow these applications to communicate

with a wide range of mission critical business services exposed from any

platform.

Service virtualization - allow z/OS and CICS and/or IMS applications to safely

expose services to partners and consume partner services

Governance Automation – automate the publishing of services exposed by z/OS

and CICS and/or IMS applications, providing lifecycle workflow with approvals,

collaboration services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of services exposed and consumed by z/OS and CICS and/or IMS

applications

Metadata federation - ensure that services exposed by z/OS and CICS and/or IMS

applications are visible to, relevant, and consumable by other platforms – and

make services from other platforms visible to, relevant and consumable by z/OS

and CICS and/or IMS applications. Automatically discover services in exposed by

z/OS and CICS and/or IMS applications and publish them into Policy Manager

subject to governance policies

Change impact mitigation - make sure that changes to services exposed by

applications running in z/OS and CICS and/or IMS don’t cause major outages by

breaking consumers

Uniform policy management - ensure that services exposed and consumed by

applications running in z/OS and CICS and/or IMS are enterprise SOA first-class

citizens by using policies that are uniform across all platforms

SOA Software’s SOLA acts as a fully functional Agent for services exposed by z/OS and

CICS and/or IMS. SOLA automatically registers the services it creates in Policy Manager

and leverages Policy Manager’s lifecycle and provisioning workflow capabilities. Its

policy engine discovers policies using WS-MetadataExchange and WS-Policy from Policy

Manager and reports metrics, usage, and fault data back to Policy Manager.

SOLA also includes a fully functional delegate for z/OS and CICS and/or IMS applications

to abstract them from the location, transport and policy complexities of consuming

services.

9.8 IBM Rational ClearCase

From IBM’s product description http://www-306.ibm.com/software/awdtools/clearcase/:

IBM® Rational® ClearCase® offers complete software configuration

management

An industry-leading solution that provides sophisticated version control, workspace

management, parallel development support and build auditing to improve productivity.

Integration with leading IDEs allows you to work in your preferred environment

Transparent real-time access to files and directories virtually anywhere in your

organization

Page 29: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 28

Sophisticated branching and graphical merge tools enable concurrent access and

efficient use of time

Lightweight, feature-rich clients allow you to work locally or remotely

Support for open source environments provides added workspace flexibility

Seamless integration with IBM Rational ClearQuest® offers streamlined defect

tracking for better team coordination and tracking of project progress

Integration with IBM Rational Build Forge® automates build tasks and reduces build

time Operating systems supported: AIX, HP Unix, Linux, Other Unix, Sun Solaris, Windows

9.8.1 Governance Automation Model

SOA Software’s Portfolio Manager discovers existing assets from, and Repository

Manager establishes development governance automation capabilities over ClearCase,

enabling rule-based extraction of software asset artifacts and metadata from ClearCase-

controlled directories and files.

SOA Software’s Portfolio Manager and Repository Manager ensure that IBM Rational

ClearCase customers can benefit from the following core Ready-to-Use SOA Governance

Automation best practices:

Governance Automation – automate the publishing of the IBM® Rational®

ClearCase managed content as software assets, providing lifecycle workflow with

approvals, collaboration services, and consumer contract provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of software assets and artifacts stored in IBM® Rational® ClearCase

Metadata federation - ensure that software assets and artifacts stored in

ClearCase are visible to, relevant, and consumable by other platforms

Change impact mitigation - make sure that changes to software assets whose

artifacts are stored in ClearCase don’t cause major outages by breaking

consumers

Uniform policy management - ensure that IBM® ClearCase is treated as a first-

class citizen throughout an enterprise SOA by applying development policies to

files and metadata stored within ClearCase

9.9 IBM Rational ClearQuest

From IBM’s product description http://www-306.ibm.com/software/awdtools/clearquest/

IBM® Rational® ClearQuest® offers comprehensive software change

management

It provides defect tracking, process automation, reporting and lifecycle traceability for

better visibility and control of the software development lifecycle.

Real-time reporting and process enforcement improve project visibility and control

Automated workflows and e-mail notifications enhance team communication and

coordination

Test management unifies development and testing activities, from planning through

results, for improved software quality

Page 30: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 29

Access control, electronic signatures, repeatable processes and audit trails simplify

compliance management

Web interface allows easy access from virtually anywhere

Integration with requirements, development, build, test, deployment and portfolio

management tools facilitates rapid response to change Operating systems supported: AIX, HP Unix, Linux, Sun Solaris, Windows

9.9.1 Governance Automation Model

SOA Software’s Repository Manager establishes development governance automation

over the extended software configuration management model presented by IBM Rational

ClearCase and ClearQuest UCM. UCM best practices provide a controlled and traceable

environment for development file modification; these modifications in turn are exposed

to enterprise development governance processes via Repository Manager, enabling rule-

based extraction of software asset artifacts and metadata from ClearCase-controlled

directories and files and presentation of associated ClearQuest changesets specifying the

rationale for changes to these artifacts and metadata.

SOA Software’s Repository Manager ensures that IBM Rational ClearCase customers can

benefit from the following core Ready-to-Use SOA Governance Automation best

practices:

Governance Automation – automate the publishing of the IBM® Rational®

ClearCase and ClearQuest managed content as software assets, providing

lifecycle workflow with approvals, collaboration services, and consumer contract

provisioning

Continuous Compliance and Validation - ensure the relevance, applicability and

suitability of software assets and artifacts stored in IBM® Rational® ClearCase and

whose changes are gated by ClearQuest

Metadata federation - ensure that software assets and artifacts stored in

ClearCase and associated changesets stored in ClearQuest are visible to,

relevant, and consumable by other platforms

Change impact mitigation - make sure that changes to software assets whose

artifacts are stored in ClearCase don’t cause major outages by breaking

consumers

Uniform policy management - ensure that IBM® ClearCase is treated as a first-

class citizen throughout an enterprise SOA by applying development policies to

files and metadata stored within ClearCase

9.10 IBM Rational Application Developer

From IBM’s product description

http://www-306.ibm.com/software/awdtools/developer/application

IBM® Rational® Application Developer for WebSphere® Software extends

Eclipse with visual construction development.

Helps Java™ developers rapidly design, develop, assemble, test, profile and deploy high

quality Java/J2EE™, Portal, Web, Web services and SOA applications.

Page 31: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 30

Increases productivity and shortens the development and test cycles as it extends

the Eclipse 3.2 environment.

Features a flexible installation process designed to provide developers with only the

functions they need.

Is integrated and optimized for IBM WebSphere® Application Server and IBM

WebSphere Portal Server products and includes test environments for these

products.

Shortens the Java learning curve through visual design, with auto-synchronized code

modeling.

Uses robust capabilities to create SOA applications, including the ability to

automatically create necessary SOA components such as WSDL and WSIL files.

Applies visual portal development techniques to speed development.

Update! version 7.0.0.3 provides features for assembling and deploying reliable,

asynchronous, secure, and interoperable Java Web services for application

components. Operating systems supported: Linux, Windows

9.10.1 Governance Automation Model

Through its Eclipse-based plug-in, SOA Software’s Repository Manager simplifies the

process of consuming software assets governed via an enterprise’s development

governance processes. When combined with IBM Rational ClearCase, Repository

Manager allows developers to import symlink-based references from ClearCase

controlled artifacts into ClearCase-controlled RAD projects, thereby ensuring that such

projects always have access to the correct artifact instance during software development

activities.

SOA Software’s Repository Manager and its RAD plug-in ensures that IBM Rational

Application Developer customers can benefit from the following core Ready-to-Use SOA

Governance Automation best practices:

Governance Automation – automate the consumption approval of Repository

Manager controlled software assets through wizard-based lifecycle workflow with

approvals, collaboration services, and consumer contract provisioning

Metadata federation - ensure that software assets and artifacts governed by

Repository Manager are visible to, relevant, and consumable by Rational

Application Developer users

Change impact mitigation – through Asset Relationship Visualization, make sure

that changes to software assets don’t cause major outages by breaking

consumers

Page 32: Ready-to-Use SOA Governance for IBM WebSphere · SOA Software’s products provide Ready-to-Use SOA Governance Automation for IBM WebSphere. This allows customers to confidently use

www.soa.com Copyright © by SOA Software, Inc. 2011. All rights reserved. 31

10 About SOA Software

SOA Software is a leading provider of unified SOA governance, cloud and enterprise API

Management products that enable organizations to successfully plan, build, and run

enterprise services and open APIs. The world’s largest companies including Bank of

America, Pfizer, and Verizon use SOA Software solutions to transform their business.

For more information, please visit http://www.soa.com and www.soa.com/ibm.

SOA Software, Atmosphere, atmos.phe.re, Policy Manager, Portfolio Manager,

Repository Manager, Service Manager, Atmosphere, atmos.phe.re, and SOLA are

trademarks of SOA Software, Inc. All other product and company names herein may be

trademarks and/or registered trademarks of their registered owners.

SOA Software, Inc.

12100 Wilshire Blvd, Suite 1800

Los Angeles, CA 90025

866-SOA-9876

www.soa.com

[email protected]

Copyright © 2011 by SOA Software, Inc.

Disclaimer: The information provided in this document is provided "AS IS" WITHOUT ANY WARRANTIES OF ANY KIND INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF INTELLECTUAL PROPERTY. SOA Software may make changes to this document at any time without notice. All comparisons, functionalities and measures as related to similar products and services offered by other vendors are based on SOA Software's internal assessment and/or publicly available information of SOA Software and other vendor product features, unless otherwise specifically stated. Reliance by you on these assessments / comparative assessments are to be made solely on your own discretion and at your own risk. The content of this document may be out of date, and SOA Software makes no commitment to update this content. This document may refer to products, programs or services that are not available in your country. Consult your local SOA Software business contact for information regarding the products, programs and services that may be available to you. Applicable law may not allow the exclusion of implied warranties, so the above exclusion may not apply to you.