Professional Documents
Culture Documents
Richer Experience
PKI
Dashboards
MONITORING
Fusion Effect
SERVICE BUS
Security
Reliability
Logging
Failover
Dynamic Routing
Or a c I e SOA Sui t e Be s t o f Br e e d SOA To o l s a n d Mi d d l e wa r e
5
Architecture ully embraces SOA and proides a blueprint or creating next generation
inrastructure that addresses these enterprise requirements ,shown in ligure 2,.
Iigure 2: Oracle Iusion Architecture
1he key principles o this architecture are:
Serice and eent enabled applications or maximum lexibility and reuse
Model-drien applications and business processes or highest productiity and
customizability
Actionable intelligence to make decisions and optimize business operations in
real time
Grid ready to delier mainrame QoS` on low cost hardware
Standards-based, portable and pluggable in a heterogeneous applications and
technology enironment to enable seamless adoption.
Oracle lusion Middleware enables Oracle lusion Architecture with a comprehensie,
uniied suite o standards-based middleware components that proides a
comprehensie technology oundation - an Application Platorm Suite ,APS,. Oracle SOA
Suite is a comprehensie package o key best o breed components in Oracle lusion
Middleware that is ocused on enabling organizations to build and deploy applications built to
SOA. It seamlessly integrates into existing heterogeneous I1 enironments including 3
party
application serer products. As such, it proides the quickest return on inestment and lowest
risk solutions to organizations looking to succeed with SOA.
O R A C L E S O A S U I T E V A L U E P R O P O S I T I O N
Uniquely ranked as Leader
in following Gartner Magic Quadrants
Application Platform Suites
Development Tools
Application Server
Web Services Platform
Enterprise Portal
Business ntegration
dentity Management
Web Services Management
ETL Data ntegration
U Un ni if fi ie ed d P Po or rt ta aI I
B Bu us si in ne es ss s P Pr ro oc ce es ss s O Or rc ch he es st tr ra at ti io on n
P Pr ro oc ce es ss s m mo od de el ls s B BP PE EL L e en ng gi in ne e
F Fu us si io on n S Se er rv vi ic ce e B Bu us s
M Mu ul lt ti i- -p pr ro ot to oc co ol l r ro ou ut ti in ng g
M Me es ss sa ag ge e t tr ra an ns sf fo or rm ma at ti io on n
S Se er rv vi ic ce es s a an nd d E Ev ve en nt t M Me ed di ia at ti io on n
G Gr ri id d C Co om mp pu ut ti in ng g
A Ac ct ti iv vi it ty y
M Mo on ni it to or ri in ng g
F Fu us si io on n S Se er rv vi ic ce e R Re eg gi is st tr ry y
A Ap pp pl li ic ca at ti io on n I In nt te eg gr ra at ti io on n S Se er rv vi ic ce es s
P Pr ro oc ce es ss s I In nt te eg gr ra at ti io on n S Se er rv vi ic ce es s
D Da at ta a a an nd d M Me et ta ad da at ta a S Se er rv vi ic ce es s
B Bu us si in ne es ss s
I In nt te eI II Ii ig ge en nc ce e
O Or ra ac cI Ie e A Ap pp p C Cu us st to om m A Ap pp p I IS SV V A Ap pp p
Clustering Security
Provisioning Configuration
Data Management Directories
Identity Management Web Cache
6
Oracle SOA Suite proides a comprehensie suite o key best o breed SOA technologies that
plugs into heterogeneous I1 inrastructures and enables enterprises to incrementally adopt
SOA. 1he components o the suite beneit rom common capabilities including a single
deployment and management model and tooling, end-to-end security and uniied metadata
management. Oracle SOA Suite is unique in that it proides a set o integrated capabilities -
messaging, serice discoery, orchestration , BPM, actiity monitoring, \eb serices
management and security, business rules, serices directory and deelopment tool, serice-
enabled portal, yet, at the same time, proides support or existing middleware technologies -
such as third party J2LL application serers, deelopment tools, and message queues and
LSBs. lence, enterprise I1 departments can adopt the whole suite, which beneits rom an
integrated set o capabilities, or, adopt pieces a la carte. 1he components o Oracle SOA Suite
are shown in ligure 3 and discussed in the ollowing sections.
Figure 3: Oracle SOA Suite
Creating Services - JDeveIoper, ADF, TopIink
Oracle JDeeloper, Oracle Application Deelopment lramework ,Oracle ADl,, and Oracle
1opLink are deelopment components o Oracle SOA Suite that together orm a
comprehensie integrated serices enironment ,ISL, to deelop, compose, and orchestrate
serices into business processes that can be deployed, registered, and consumed rom seeral
types o user interaces, including desktop clients, browsers, and mobile and telnet deices.
Oracle JDeeloper is an ISL that enables deelopers to model, create, discoer, assemble,
orchestrate, test, deploy, and maintain composite applications based on serices. JDeeloper
supports SOA principles and XML \eb serices standards, as well as traditional Jaa, J2LL,
and PL,SQL component and modular code mechanisms. Oracle ADl is a model-drien
AppIication Server
J2EE, WS-*, Event Services
Enterprise Service Bus
Routing Adapters UDDI
Registry
BPEL Process Manager
Native
BPEL
Human
WorkfIow
Business
RuIes
Web Services
Manager
Security
BAM
Monitoring AnaIytics CEP
PortaI
Content CoIIaboration WorkpIace
JDeveIoper
Integrated
Services
Environment
App Dev
Framework
"Oracle leads all other vendors. This is due
to strong scores in the current oering
category of connection where the vendor
provides superior support for a wide range
of connectivity protocols, including both core
and extended Web service specifcations
and standards. standards. The vendor also
scored well in the areas of mediation and
change and control."
- Mike Gilpin, Ken Vollmer, John Rymer,
Forrester Wave Enterprise Service Bus ,
Q4 2005
Or a c I e SOA Sui t e Be s t o f Br e e d SOA To o l s a n d Mi d d l e wa r e
7
SOA ramework that automates and manages business and data serices and proides a
standard data-and serice-binding layer based on JSR 22 that can be used with process lows,
page lows, and serice inocations. Oracle ADl also implements SOA design practices, and
makes user interaces as loosely coupled as serices themseles. Oracle 1opLink is a data
serices ramework that allows access to relational and XML data. It proides isual mapping
tools or acilitating object to relational and object to XML mapping. Oracle 1opLink and
Oracle ADl rameworks simpliy creation o business and data serices that can be inoked
rom rich \eb interaces o serice-oriented applications.
Oracle JDeeloper, Oracle ADl and Oracle 1opLink together help organizations adopt SOA
and delier applications and serices productiely. Applications deeloped can be changed
more easily. 1his helps to protect inestments in heterogeneous enironments.
1he use o JSl and BPLL deelopment is shown in the screenshot in ligure 4.
Figure 4: 1SF-Based Web Application and BPEL Process Flow in 1Developer
Oracle JDeeloper, Oracle ADl, and Oracle 1opLink together proide a comprehensie
integrated serices enironment and ramework that allows deelopers to build model-drien
applications and business processes which can then be deployed and registered as
applications, serices, or business processes into Oracle SOA Suite components.
Key capabilities include:
Creativg v.ive.. errice. - Support or \SIl bindings that allows the publishing o
Jaa, LJB, Jaa Message Serice ,JMS,, and enterprise applications connected ia Jaa
Connector Architecture ,JCA, adapters as serices that can be inoked natiely.
Support or RLS1 ,Representational State 1ranser, based serice. JDeeloper also
eatures support or deeloping J2LL 1.4-compliant \eb serices, with the ability to
create JAX-RPC clients and serices, and \S-Security, \S-Reliability, and \S-
Management. Support or deeloping bottom-up serices ia meta data tags and
contract-drien deelopment using the \SDL editor is also included.
"Having chosen ADF
framework and adopted that
in our development cycle; it
has given us a lot of
different benefits that we
really didn't expect. One of
which is that has
accelerated the actual
coding of projects and
allowed us to now
concentrate on the upfront
business challenge that
faces the organization.
- Les Morton, Project Team
Leader Associated
Wholesales Inc.
8
Creativg v.ive.. ava |.er vterface ogic JDeeloper includes Support or LJB 3.0 that
simpliies backend business logic and persistence mapping aspect. New JDeeloper
wizards generate LJB 3.0 components, and property editors support the incremental
deelopment o business methods and mapping annotations. Support or JSl or
building \eb applications enables rich user interaces. JDeeloper proides seeral
tools such as isual UI component editing ia JSl \\SI\\G editors, drag-and-drop
capabilities or JSl components onto pages, and isual diagrammer or rapid
deelopment o JSl naigation.
ivaivg |.er vterface. to errice. - JDeeloper includes support or JSR 22 that
acilitates binding user interaces to data sources and serices. Support or drag-and-
drop attributes, collections and operations rom the data control palette that is exposing
backend business systems, and or serices and business process is also included. Also
eatured is support or data-binding Oracle ADl laces components to backend
business serices and business process.
Discovering Services - Service Registry
Oracle SOA Suite Serice Registry proides a conigurable, scalable and secure repository or
\eb serices that can be proisioned, discoered and goerned by Oracle SOA Suite. 1he
product complements the SOA unctionality proided by other suite components, supplying
the enterprise with a mechanism or adertising and managing aailable serice oerings. 1he
Registry is one o the irst product oerings to ully support the OASIS Uniersal
Description, Discoery and Integration ,UDDI, 3 standard.
Capabilities o Oracle SOA Suite Serice Registry include:
errice rori.iovivg 1he Serice Registry enables proiders o \eb serices to publish
serices and related artiacts, thereby making oerings aailable to serice consumers.
Serices can be categorized or classiied using a comprehensie taxonomy management
eature, which allows the import o existing business taxonomies as well as the creation
o custom classiications.
errice Di.corer, 1he Registry essentially seres as a directory` o serices, proiding
reerences to serice descriptions and endpoints aailable on Oracle SOA Suite
instances. 1he Registry acilities SOA adoption by enabling users to search or serices
that meet speciic criteria as well as browse oerings aailable rom proiders, without
haing to understand the underlying UDDI data structures. Controlled access to
serices ensures accountability and responsibility, while enabling users to limit the
isibility o sensitie serices.
O. Corervavce ava ifec,cte Mavagevevt - 1he Registry seres a single point o control
or SOA goernance, ensuring quality and consistency o serice oerings across the
enterprise. A quality control worklow eature is incorporated through which serices
are irst published to a staging` registry, then moed to a production` registry
accessible to consumers ater corporate-mandated checks hae been perormed. A
subscription mechanism enables consumers to be notiied when changes are made to a
Or a c I e SOA Sui t e Be s t o f Br e e d SOA To o l s a n d Mi d d l e wa r e
9
serice, promoting reuse o serices and preenting reinention o existing
unctionality.
v.iov vtegratiov - \ork on integrating the Registry with components o the Oracle
SOA Suite - Oracle BPLL Process Manager, Oracle JDeeloper, Oracle \eb serices
Manager and the broader lusion Middleware platorm is on-going, with the ultimate
goal o making it easier to discoer, orchestrate, secure, and manage an SOA. In
addition, the Oracle SOA Suite Serice Registry proides comprehensie \eb-based
user interaces or publishing and discoering serices, as well as or managing the
installation.
Integrating Services - Enterprise Service Bus
Oracle SOA Suite eatures an Lnterprise Serice Bus ,LSB,. As the glue` or the enterprise
application inrastructure, your integration platorm proides the basis or gathering
inormation that dries the organization rom all types o data sources. Oracle LSB is the
realization o the SOA and Lent Drien Architectures ,LDA, whereby distributed
applications are integrated in a loosely coupled paradigm. At their core LSBs implement
messaging to enable serices to be integrated in a message-based paradigm - both
synchronous and asynchronous styles. 1hey also incorporate routing so that messages can be
routed to the appropriate serices based on rules goerning both the message content and any
external actors. 1hirdly, LSBs also embody message transormation. Since LSBs enable
routing and transormation logic to be changed at runtime, they enable more maintainable
applications to be built, since serice connections are less brittle when an LSB is used.
Key capabilities or Oracle LSB include:
Retiabte Mvtti1rav.ort v. - Oracle LSB proides a lexible real-time enterprise
backbone capable o supporting industry standard protocols such as SOAP, l11P,s,,
or JMS. A special in-memory optimization is automatically used or serice calls within
the same irtual machine. It proides ast, scalable, guaranteed once and only once
message deliery using both point-to-point and publish,subscribe patterns. Oracle LSB
can use Oracle's own JMS or Oracle Adanced Queuing ,AQ, as a message transport, it
is also certiied with other messaging proiders such as IBM MQ, Sonic MQ and 1ibco.
Covte v.ive.. Data 1rav.forvatiov. - Businesses require lexibility in combining data
models rom disparate systems. Oracle LSB utilizes standards based data mapper
unctionality within JDeeloper to create transormation templates in the XSL1
language or reuse across the enterprise. 1he auto-mapping eature increases user
productiity by remembering and reusing common mappings rom preious
transormations.
Covrebev.ire Mavagevevt ava Deto,vevt vfra.trvctvre - At design time, Oracle LSB
allows you to create irtual serice names into lookup repositories, such as UDDI, that
are later bound to real or physical application URLs deined during deployment. Oracle
LSB Diagrammer and 1opology Viewer allow you to build and isualize relationships
between serices and graph dependency charts or impact analysis or proposed changes
to your systems. 1he iewer includes an LSB wide search acility to locate components
"Working with a strong partner like Oracle
Corporation in the SOA environment especially
using Oracle's JB implementation, help us to
solve an important part of the ongoing
integration issues and improve our best-of-
breed SOA platform including our Serivce
Backbone as a SOA mediatior."
- Michael Herr, head of SOP Group,
Deutsche Post
10
such as Adapters, messages and actie process instances based on unlimited input
criteria. Centralized management o distributed applications is a key component o
Oracle LSB.
Perra.ire vterri.e ,.tev Covvectirit, - Adapters proide key connectiity and discoery
into enterprise and legacy system meta-data to enable mapping o objects to real-time
eents in your LSB. Oracle proides built-in Adapter wizards or Database, Oracle AQ,
JMS, Lmail, l1P and liles, as well as enterprise applications such as the Oracle L-
Business Suite, PeopleSot, JD Ldwards, SAP and legacy systems such as CICS, IMS
and een 1Pl. All adapters conorm to the J2LL Connector Architecture ,JCA, open
standard adopted by all major integration endors.
teibte Covtevt a.ea Rovtivg - 1he ability to ilter and route data based on message
content is critical to optimal management o your LSB. Oracle LSB enables routing in
design time deployment descriptor deinitions that can be modiied at runtime or
adjusting application eiciency. 1his minimizes the oerhead o redeployment. lor
example, as system demand increases and you add serers to your cluster, you can
dynamically route traic based on content such as currency, region, product name or
any other contextual data. Oracle LSB supports a ariety o rules capabilities or
iltering including Oracle BAM, Oracle Business Rules and external proiders. Content
iltering can also be implemented in messaging systems such as JMS using conigurable
ilter based subscriptions and message selectors.
Composing & Orchestrating Services - BPEL Process Manager and WorkfIow
Oracle BPLL Process Manager enables business processes to be modeled, automated, and
monitored. Unlike code-generation techniques or automating business processes, BPLL
Process Manager includes a natie BPLL ,Business Process Lxecution Language, engine that
executes the processes. 1his approach not only enables reuse, but also enables isibility into
in-light business processes at the indiidual and aggregate leels ,the latter being proided by
Oracle BAM,, and lays the oundation or close-loop business process management, process
improement and compliance. Oracle BPLL Process Manager proides a comprehensie,
standards-based and easy to use solution or creating, deploying and managing cross-
application business processes with both automated and human worklow steps. It proides
high-perormance, reliable execution o serice-oriented business processes deined with the
BPLL standard. Its natie support or standards such as BPLL, XML, XSL1, XPA1l, JMS,
JCA and \eb serices makes it an ideal solution or creating integrated business processes
that are truly portable across platorms. It also proides audit trails or both completed and
in-light processes, and process history that enables process improement. linally, the Oracle
BPLL Process Manager is a 100 natie BPLL engine that coexists happily with existing
middleware technologies and platorms and proides an unrialed process portability and
endor lexibility. 1he graphical capabilities oered are shown in ligure 5.
Key capabilities o Oracle BPLL Process Manager include:
"BPEL will emerge as the leading
industry standard for Web
services flow composition (0.8
probability).
David Smith
Gartner
Or a c I e SOA Sui t e Be s t o f Br e e d SOA To o l s a n d Mi d d l e wa r e
11
Ricb 1ootivg for vtegratiov - 1he Lclipse-based Oracle BPLL Designer is unique in that
it uses BPLL as its natie ormat. 1his means that processes built with the Designer are
100-percent portable. Oracle BPLL Process Designer also comes as a plug-in to the
Oracle JDeeloper enironment, proiding a uniied design time enironment to
deelop user interaces and orchestration serices. Built-in integration serices enable
deelopers to easily leerage adanced worklow, connectiity, and transormation
capabilities rom standard BPLL processes. 1hese capabilities include support or
XSL1 and XQuery transormation as well as bindings to hundreds o legacy systems
through JCA adapters and natie protocols using \SIl. 1he extensible \SDL binding
ramework enables connectiity to protocols and message ormats other than SOAP.
Bindings are aailable or JMS, email, JCA, l11P GL1, POS1, and many other
protocols enabling simple connectiity to hundreds o back-end systems. 1his approach
gies unparalleled perormance, yet ease o deelopment. User-riendly wizards to set
up simple and complex human worklow steps, conigure adapters, and deine complex
transormation maps are proided as standard serices. luman worklow serices such
as task management, notiication management, and identity management are proided
as built-in BPLL serices to enable the integration o people and manual tasks into
BPLL lows.
Figure 5: Graphical Development of Business Processes in BPEL
Covrebev.ire Movitorivg ava Mavagevevt Oracle BPLL Process Manager Console
proides a user-riendly \eb-based interace or management, administration, and
debugging o processes deployed to the BPLL serer. Audit trails and process
"BPEL is the future of the
integration space in my view.
Why? Because the value is so
much higher when you provide
not only a way to integrate
applications, but also a way to
create services from them and put
them into business processes.
John Rymer, Vice President
Forrester Research
12
history,reporting inormation are automatically maintained and aailable through the
BPLL Process Manager Console and ia a Jaa API. 1he worklow task lists and
historical process analysis reports are also integrated into the same console.
|varattetea catabitit, ava .raitabitit, - 1he core BPLL engine proides the most
mature, scalable, and robust implementation o a BPLL serer aailable today. 1he
Oracle BPLL Process Manager executes standard BPLL processes and proides a
dehydration` capability so that the state o long-running lows is automatically
maintained in a database, enabling clustering or both ail-oer and scalability. 1he
BPLL Serer leerages Oracle Containers or J2LL as an underlying J2LL application
serer, but also supports most major commercial application serers such as BLA
\ebLogic and JBoss.
Automating Business PoIicies - Business RuIes
Agility is one o the biggest promises o SOA and BPM: the ability to make rapid changes to
processes in step with the changes that occur inside o your business. Such changes are not
always changes to the process. Oten they are changes to the rules that drie the process. A
typical business process oten includes a number o decision points. 1hese decision points
generally hae an eect on the process low, or example, someone's credit rating may
determine whether he,she is approed or a low-cost loan. 1hese decisions are ealuated
based on certain conditions and acts, which may be internal or external to the business
process, and predeined company policies or rules. Business Rules Lngines allow architects to
easily deine, automate, manage, and update the decision logic that directs enterprise
applications rom a single location without needing to write code or change the business
processes calling them. Rules Lngines are naturally o interest to enterprise architects building
out SOAs, since they contribute to agility by enabling reduced time to automate, easier
change, and easier maintenance or business policies and rules. BPM technology and Rules
Lngines naturally it together: BPM enables automated and lexible business processes, Rules
Lngines enable automated and lexible business policies.
Key capabilities o Oracle Business Rules:
Catvrivg v.ive.. Poticie. .cro.. .tt .ticatiov. - In the past, Rules engines were
primarily used as a technology to sole highly complex problems requiring a great
degree o inerencing. More recently, the Rules market has eoled such that rules are
now being used or the implementation o business policies. Oracle Business Rules
enables business policies to be abstract out o any application - not just applications
that are designed to SOA. It is based on the Jess Rules Lngine, but conorms to JSR-94
and enables acts to be deined in Jaa.
.vtovatiov of v.ive.. Poticie. iv v.ive.. Proce..e. Business processes typically inole
decision steps. Oracle Business Rules enables decisions and business policies to be
abstracted out o the business process, proiding a single location or policy
management and change. Oracle Business Rules enables acts external to the business
process to be asserted in the ealuation o business rules, unlike monolithic BPM
Suites. 1he rules are separated rom the process logic and can be changed
"We have chosen Oracle's SOA
Suite including Oracle BPEL
Process Manager with SAP
Adapter, Business Activity
Monitoring and Portal to
implement a composite
application for Lufthansa Flight
Training realizing process
automation for a new business
segment called "Competence
Training" including a sales
channel for external business
partners.
- Wolfgang Schlott, Process
Management, Lufthansa Flight
Training
Or a c I e SOA Sui t e Be s t o f Br e e d SOA To o l s a n d Mi d d l e wa r e
13
independently without impacting them. 1his makes business processes less brittle - rule
changes can be deployed without modiying or rebuilding rule-enabled processes and
applications. In order to ease deelopment, increase deeloper productiity and enable
more agile applications, deelopers can use Oracle JDeeloper to build botb the
business processes in Oracle BPLL Process Manager and related business policies using
Oracle Business Rules.
barea Metaaata .cro.. Rvte., Proce..e., Portat ava .ctirit, Movitorivg Rules hae
releance to document lows, business processes, and actiity monitoring. Oracle
BPLL Process Manager, Oracle BAM and Oracle Portal applications can leerage rules
in Oracle Business Rules, including rules metadata. 1his eliminates the need to
synchronize rules across multiple rules engines and allows a common set o rules to be
used or integration, BAM, portal and other applications. lor example, a business rule
that works out the interest rate on a loan application that has been implemented as a
process in BPLL, can take into account the amount o loans approed this month to
similar customers - this data coming rom the actiity monitoring solution.
Figure 6: Business Rules as a Decision Service for Business Processes
Securing & Managing Services - Web Services Manager
Oracle \eb Serices Manager ,O\SM, enables I1 to eectiely monitor, manage and secure
serices and interactions between these serices in an SOA. It proides tools or building
security and operations policies that can be layered oer new or existing applications and \eb
serices, runtime acilities or intercepting calls to and rom an application or serice and then
executing these policies, dashboards or monitoring these policies as they execute, to ensure
serice leels and potential problems, and, alerting to enable correctie actions to be taken in
Creates
Customizes
Rule
Engin
Rules
Repository
File/D
0ecIsIon
ServIce
star
en
Business Process
:
CredIt
Score
AvaIlable
:
No
Yes
:
Aut
o Send for
revIe
w
0etermIn
e
outcom
e
NotIf
y
custome
r
Rules
Designs
Create
Decision
Defines rules
and
Busine
Analy
Assert
Creates
Customizes
Rule
Engin
Rules
Repository
File/D
0ecIsIon
ServIce
star
en
Business Process
:
CredIt
Score
AvaIlable
:
No
Yes
:
Aut
o Send for
revIe
w
0etermIn
e
outcom
e
NotIf
y
custome
r
BAM
Rules
Designs
Create
Decision
Defines rules
and
Busine
Analy
Assert
Rule
Engine
Rules
Repository
File/D
Rules
Repository
File/D
0ecIsIon
ServIce
0ecIsIon
ServIce
star
en
Business Process
:
CredIt
Score No
:
Rules
Rules
Design
process
Create
Decision
Defines rules
and facts
Busine
Analyst
Assert
Rules as
Decision
Services
Process
Developer
14
a timely ashion. Oracle \eb Serices Manager can centrally deine policies that goern \eb
serices operations such as access policy, logging policy, and content alidation, and then
wrap these policies around serices, with no modiication to existing \eb serices being
required. Also, Oracle \eb Serices Manager collects monitoring statistics to ensure serice
leels and security, and displays them in a web dashboard. As a result, Oracle \eb Serices
Manager brings enterprises better control and isibility oer \eb serices.
Key capabilities or Oracle \eb Serices Manager include:
Potic, Mavagevevt 1he Policy Manager in O\SM is a graphical tool or building new
security and operations policies, storing policies and managing distribution and updates
to runtime agents and gateways. Policy Manager supports both client-side and serice-
side policy enorcement, and allows administrators to conigure operational rules and
propagate them to the appropriate enorcement components across an application
deployment o any scale and complexity. O\SM has out-o-the-box support or
authentication and authorization using: l11P basic authentication, CORLid, Netegrity,
LDAP, X.509 Certiicates, leerages Oracle CORLid, LDAP and Netegrity or role-
based inocation access, and, supports Security Assertion Markup Language ,SAML,
or interoperability between dierent security systems.
vforcevevt - 1o ensure maximum deployment lexibility, O\SM proides two kinds
o enorcement components: Policy Gateways and Policy Agents. Policy Gateways are
deployed in ront o a group o applications or serices. Policy Gateways can intercept
inbound requests to these applications in order to enorce policy steps, adding
application security and other operation rules to applications that are already deployed.
Policy Agents proide an additional, ine-grained leel o security by plugging directly
into an application or serice. O\SM enorces true end-to-end message-leel security,
supports \S-Security or authentication and message-leel security including
encryption and signing, and supports ull and partial encryption and decryption step.
Movitorivg - Monitoring Dashboard collects data rom gateways and agents as they
execute policies and displays results in a graphical ormat. 1his allows administrators to
set quality o serice leels or each application. 1he Dashboard displays alerts when
the application exceeds established targets. It also proides I1 operations sta with
real-time isibility into the health, perormance, security and utilization o crucial \eb
serices, including end-to-end monitoring o business processes. By harnessing the real-
time data collection capabilities o the enorcement components, Monitoring
Dashboard enables administrators to analyze discrepancies between expected and actual
perormance and to monitor compliance with I1 operational best practices in real-time,
such as audits on security iolations on a per-\eb serice, per-operation and per client
basis. 1he result is best-practice security and operations across all applications and
serices across an enterprise and its partners, regardless o the how these applications
and serices were deeloped.
Covrebev.ire vort for Protocot. c