Course Outline 
for 
WSO2 API Manager 3.1.0 

Developer Advanced 
 
 
 
 
 
​Email:​ training@wso2.com 
 
  
WSO2 API Manager Developer Advanced - Training Agenda
 

Table of Contents 

Executive Summary 

Prerequisites 
WSO2 API Manager Developer Fundamentals 

Course Agenda 

Infrastructure Requirements 
Hardware Requirement 
Software Requirement 
Operating System 
Java 
WSO2 Products Used 
Other Products Used 
 
 
 
 
 
 
 
   
  
WSO2 API Manager Developer Advanced - Training Agenda
 

 
 
 
Executive Summary 
WSO2 API Manager Advanced is a course aimed at training software engineers on the features 
of the product as well as the underlying concepts and standards. The course covers deployment 
of the APIM as well as extending the product.  
 
 
Duration 

3 days  
 
 
Target Audience 

Software Engineers 
 
 
Complexity 

Intermediate/Advanced 
 
 
   
  
WSO2 API Manager Developer Advanced - Training Agenda
 

 
Prerequisites 

● WSO2 API Manager Developer Fundamentals 

● Java Programming Skills  

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

   
  
WSO2 API Manager Developer Advanced - Training Agenda
 

Course Agenda 

Day 1  
 
Architecture 
● API Manager Architecture overview 
● Product Profiles 
● Distributed Architecture 
● Data Flow in Distributed Architecture 
 
API Runtime 
● API Runtime Overview 
● API Gateway 
● API Gateway Architecture 
● API Gateway Features 
● API Gateway Request Flow 
● API Gateway Response Flow 
 
Key Management 
● Key Manager Overview 
● Token Generation Flow 
● Validating Token Request 
● Revoking Tokens 
● OAuth Authentication in Gateway 
● Validating the Token at Key Manager 
● Configuring a Third-Party Key Manager 
● Key Validation 
● Scope Validation 
● Extending Scope Validation 
Lab: WSO2 Identity Server as the Key Manager 
 
Throttling 
● Introduction 
● Traffic Manager 
● Throttling Policies 
● Deployment Architecture (Active-Active) 
 
Deployment Patterns 
● Deployment Patterns 
● Deploying API Manager in Single Node Instance 
● Distributed Deployment 
  
WSO2 API Manager Developer Advanced - Training Agenda
 

Lab: Deploy WSO2 API Manager Pattern #1 

 

Day 2 
Deploying API Manager in Docker 
● Containers vs VMs 
● Docker - Introduction 
● Docker Images 
● Deploying API Manager in Docker 
 
Deploying API Manager in Kubernetes 
● Why Kubernetes? 
● Deployment Architecture 
● Ingress 
● Production Deployment 
Lab: Deploying API Manager on Kubernetes 
Lab: Advanced Cases of using Microgateway 
 
 
API Security 
● Authentication 
● Authorization 
● Self Contained JSON Web Tokens 
● JSON Schema Validation 
● Threat Protection 
● Obtaining User Profile Information with OIDC 
Lab: Fine-Grained Policy Decisions using XACML 
 
API Product and REST API 
● API Products 
● REST APIs 
Lab: REST API 
 
Extending WSO2 API Manager 
● Mediation Extensions 
● Custom Handlers 
● Workflow Extensions 
● Custom Grant Types 
● Customizing JWT Generation 
● Extending Scope Validation 
  
WSO2 API Manager Developer Advanced - Training Agenda
 

● Extending API Lifecycles 

● Adding Reverse Proxy Server 
 
Lab: Adding Workflow Extension 
Lab: Custom Mediation Extension 
Lab: Custom Handler 
Lab: Grant Types Extension 
 
Branding Extensions 
● Overriding Developer Portal Theme 
● Categorizing and Grouping APIs 
● Configure UI Components 
● Advanced Customizations 

Day 3 
 
Debugging and Error Handling 
● API Manager Components and Features 
● Debugging Runtime Issues via Logging 
● Observability 
● Error Handling 
 
Scalability 
● Vertical Scaling 
● Horizontal Scaling 
 
Building a CI/CD Pipeline for APIs 
● Building CI/CD Strategy 
● API Controller 
● CI/CD Process 
● API First CI/CD Approach 
● API Publisher Portal Based CI/CD Approach 
Lab: Validate WSO2 API Manager Environment 
Lab: Advanced Cases of using API Controller 
 
Tuning and Performance 
● OS Level Settings 
● JVM Level Settings 
● Platform Level Settings 
● Registry Indexing 
● Throttle data and Analytics Settings 
  
WSO2 API Manager Developer Advanced - Training Agenda
 

 
Patch Application Process 
● WSO2 Update Manager 
● Architecture Overview 
● Getting Continuous Updates 
 
 
Other Advanced Exercises:  
Lab: Configure LDAP as Secondary User Store 
Lab: Associating roles with User Store groups 
Lab: On-Boarding a Standard Web Application 
Lab: Sharing Applications between Groups 
Lab: Create a WebSocket API 

   
  
WSO2 API Manager Developer Advanced - Training Agenda
 

Infrastructure Requirements 

Hardware Requirement 
During the lab session attendees are required to deploy the created samples in multiple 
middleware products. P ​ articipants are required to have a workstation with at least Intel Core i5 
(or similar), 8GB of RAM and 10GB Free Storage to run the samples smoothly. 
 

Software Requirement 

Operating System 
Windows 2012 R2 
Ubuntu 14.04 
Mac OS High Sierra 

Java 
Oracle JDK 1.8.x 
 

WSO2 Products Used 

WSO2 API Manager 3.1 [1], Prepacked WSO2 Identity Server Key Manager [2] 
 
[1] ​http://wso2.com/api-management/ 
[2] ​https://wso2.com/api-management/install/key-manager/ 
 

Other Products Used 

MYSQL[1], JDBC driver for MySQL[2] 
 
[1] ​https://www.mysql.com/downloads/ 
[2] ​http://dev.mysql.com/downloads/connector/j/ 
 
 
 
The participants are expected to be connected to the internet throughout in order to 
successfully complete the lab exercises.