Infrastructure Suite - SOA Management, SOA Security, SOA Governance

SOA Software’s Infrastructure Suite™ provides comprehensive, platform-independent governance, policy, security, and management in an integrated SOA infrastructure solution. The Infrastructure Suite consists of two products, Workbench™ for governance, and Service Manager™ for security and management.

These products share common policy management and auditing capabilities to deliver closed-loop governance. The Infrastructure Suite leverages existing investments in heterogeneous registries, and service platforms and containers including application servers, ESBs, and business applications.

Workbench is a comprehensive SOA governance solution offering an integrated metadata repository and UDDIv3 registry with unique workflow and collaboration capabilities to instill consistency and accountability and encourage desired behavior.

Service Manager is the industry’s most powerful SOA run-time security, mediation and management solution. It is a standards-based solution provinding intermediaries that work with all common service platforms to ensure the security, reliability, interoperability, visibility and control of services throughout enterprise SOA.

These products offer exceptional performance and scalability and have processed tens of billions of Web services messages in production environments around the world.

The SOA Software Infrastructure Suite helps companies to:

Measure and manage the effectiveness and value of SOA throughout their organization
Workbench provides real-world visibility into how different parts of the organization are exposing and consuming services using real-time data provided by Service Manager. It can assign value to service transactions and can calculate the value generated and cost saved by each part of the company.

Manage, monitor, and control the relationships between service consumers and providers
Workbench introduces the active contract as a vehicle to define the relationship between a consumer and a provider. The active contract describes the capabilities of the consumer, and the policies of the provider, finding a match, or agreeing to mediation to ensure interoperability. It also defines specific access rights and service-level agreements for each consumer. Contracts can be created at various levels of granularity from business through service operation and interface. For example a service provider might agree to a contract allowing any user in a particular organization to consume one operation of a service, guaranteeing a specific SLA for those users and requiring that they comply with a particular policy.

Reduce development cost and time by providing mechanisms to ensure that only appropriate services are published and that they can easily be found and used
Workbench provides a built-in UDDIv3 registry and advanced repository combined with a powerful workflow solution to govern the process of publishing, finding, and accessing services. It allows different organizations to define their own policies governing the design requirements and approvals process for services and enforces these policies as services pass through their lifecycle.

Workbench also provides a unique contract provisioning process allowing potential consumers of services to negotiate an appropriate agreement with a provider allowing them access to a service using policies and at service levels they require. It even introduces the concept of demand driven service development where consumers can request that a development organization provide them with a service interface of their specification.

Ensure that policies defined at design-time are enforced at run-time
Service Manager can be deployed standalone, or deeply integrated with Workbench. It intercepts messages to implement and enforce centrally managed policies. Service Manager is a massively scalable solution proven in production in the most demanding environments in the world.

Monitor and manage the performance and reliability of service provided both internally and to external customers
Service Manager monitors service throughput, performance, and messages, and provides an audit trail so that Workbench can verify that run-time policies are being enforced. It manages and enforces SLA policies, offering powerful dynamic management capabilities to automatically adjust routing patterns and service response times to guarantee SLA compliance for high priority messages.

Ensure the first-mile to last-mile security of messages in the SOA
Service Manager provides the industry’s most complete end-to-end Web services security solution. It supports a wide range of security standards and provides transparent cryptographic operation support and key management. Service Manager has certified integrations with most common access management solutions including CA SiteMinder and IBM Tivoli Access Manager, and supports Active Directory, Kerberos, and LDAP. It includes powerful authentication, token-exchange, and authorization services.

Unique capabilities of our approach

• Closed-loop Policy Management - Policy definition at design-time, policy enforcement at run-time, metric and compliance data collection for closed-loop policy audit
• Standards-based - implements the SOA Infrastructure Reference Model
• Deep integration between governance and run-time for contract enforcement, SLA governance, and other advanced features
• Active Contracts enforcing consumer/provider contractual relationships
• Contract-based service provisioning workflow
• Contextual collaboration allowing developers, architects, operations, and administration to collaborate on the creation and management of assets
  End-to-end Security (first-mile, in-transit and last-mile security)
• Multi-party SLAs to monitor the performance of services from the perspectives of their various users
• Live metrics to drive design-time decisions based on the actual performance and availability of services
• The most comprehensive set of supported service platforms including application servers, ESBs, and business applications
• Seamless, standards-based metadata integration, interoperability and interchange with existing 3rd party registries