1

2

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions.The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

<Insert Picture Here>

SOA Governance11.05.2009

Sören HalterPrincipal Sales Consultant

4

Agenda

• Why SOA Governance• End-to-End Governance• Oracle SOA Governance Products• Demo

• Why SOA Governance

5

Three Takeaways

Governance involves more than technology. The right mix of people, process and technology is required for success.1

3

2Governance is a key requirement for a smooth transition to SOA. It can make business alignment & business value a reality, while reducing risk and facilitating cost savings.

Governance should extend throughout the entire SOA lifecycle, from planning and design through runtime and retirement.

6

Why Governance is Needed

• Business Value• Ensure that project investments yield business

value

• Cost savings • Promote consolidation, standardization, and reuse

• Risk Reduction • Control dependencies, manage the impact of

change, enforce policies

• Alignment • Keep SOA aligned with the business and

architecture and in compliance with business and IT policies

• Business Agility• Gain visibility into your SOA for more rapid

decision making

7

Lack of governance inhibits SOA adoption

Q: What, if anything, has or will inhibit SOA adopt ion at your company?

Base: 592 (Among qualified respondents)

5%

3%

8%

3%

21%

24%

27%

33%

39%

39%

40%

50%

33%

0% 10% 20% 30% 40% 50% 60%

Nothing

Don't know

Other

Funding/budget issue

Identifying the new application or service to build

Difficulty determining where/how to start

No reference architecture

Lack of service infrastructure technology

Unresolved security issues

Incomplete/immature standards

Performance and reliability

Difficulty building an SOA roadmap

Lack of SOA governance

8

Common Pain Points

• Increasing (SOA) complexity• Lack of visibility• Inability to manage impact of change• No ability to measure results• Lack of trust• Inability to manage service proliferation

9

Agenda

• Why SOA Governance• End-to-End Governance• Oracle SOA Governance Products• Demo

• End-to-End Governance

10

SOA GovernanceApplication Production Assurance

Registry / RepositoryRegistry / Repository

Publish, Discover, Change Manage

Services

Policy ManagementPolicy Management

Define & Monitor Security & SOA

Policies

SOA ManagementSOA Management

Provision Services & Monitor SLAs

11

SOA GovernanceClosed-Loop Lifecycle

Visibility

Analytics

Control

Retire Services

Manage Change

Analyze& Model

MonitorPolicies& SLAs

Deploy &Secure

Develop

Design

Registry / Repository

12

Closed Loop Service LifecycleProvider Perspective

Other Runtime Metrics

Repository

Harvest• Target

Service Metadata

Staging

UDDI

Metrics via UDDI

Publish

Integration Testing

UDDI

Approve

SOA Test, Staging & Production

Auto Deployment

Policy Enforcement

• JMX• SNMP• Reporting

IT Operations

SOA Monitoring & Management

SLA Management

Consumer Provisioning & Contract Management

Single View of Assets

Architect

Service Definition

BusinessOwners

• WSDL• XSDs• Code• Proxy

Validation Proxy Pipeline

SOA Designers and Developers

Service Implementation and Configuration

Service Bus

Mediation

UDDI

Production

Discover

13

End-to-End SOA Governance Key Elements

• Serves as single source of truth for SOA portfolio

• Manages SOA assets/projects and associated metadata

• Provides dependency tracking and impact analysis

• Automates collection of assets and metadata from multiple sources

• Provides runtime reference for bindings and policies

• Provides structure and automation to SOA lifecycle

• Tracks usage and compliance for visibility into ROI

Registry/Repository

14

End-to-End SOA Governance Key Elements

Registry/Repository

Policy Management

• Provides visibility and management of policy artifacts

• Supports policy versioning and change control

• Simplifies and automates federated policy administration

• Distributes enforcement across the SOA infrastructure

• Enables continuous design-time policy validation

• Ensures policy compliance throughout the lifecycle

• Enables direct control over SOA lifecycle

15

End-to-End SOA GovernanceKey Elements

Registry/Repository • Manages deployment of services and associated policies

• Provides structured contract between consumer and provider

• Enables policy-based “Terms of Use”

• Enforces contracts via business, SLA and security policies

• Provides foundation for shared services model

SOA Provisioning

Policy Management

16

End-to-End SOA GovernanceKey Elements

Registry/Repository• Centrally monitors

distributed, heterogeneous SOA

• Gives end-to-end visibility of composite service networks

• Monitors, diagnoses and ensures service levels

• Tracks enforcement of service contracts

• Tracks Quality of Service

• Surfaces metrics and analytics for decision support

• Continues to give structure and automation to SOA lifecycle

SOA Provisioning

SOA Monitoring / Management

Policy Management

17

Agenda

• Why SOA Governance• End-to-End Governance• Oracle SOA Governance Products• Demo• Oracle SOA Governance Products

18

Product OfferingService-Oriented Architecture – SOA Governance

• Repository to capture, share, & change manage SOA Artifacts across lifecycle

• Standards-based UDDI v3.0 Registry to publish & discover Services

• Policy Manager to define & manage Security & QOS Policies on Services

• Management Console to Monitor Service Level Response Times & Availability

• Management Console to Monitor, Trace, & Change-Manage SOA Composites

• Model and monitor JEE services and their supporting components

A Comprehensive Suite for End-to-End SOA Governance

Enterprise Manager SOA Management Pack Plus

Oracle Web Services Manager

Oracle Enterprise Repository

Oracle Service Registry

19

SOAGovernance

Suite

Service

Registry

Oracle SOA Governance Solution

Metadata

Exchange

Enterprise

Repository

Web Services

Manager

JDeveloper Eclipse VS.NET

Ant BuildSCMs

Oracle Service

BusOracle BPEL

Process Mgr

Web Services Manager

• Run-time governance

• Policy-oriented security and access control

UDDI Integration

SOA Integration

• Infrastructure support: SOA and BPM suites -BPEL, Service Bus …

• Developer tooling

• UDDI for “Best of Breed” runtime tooling

Enterprise Repository

• Impact / dependency analysis

• Compliance Reporting

• Service reuse

• Lifecycle management

SOA Management Pack Plus

• Manage production processes and services

• Model and manage composite apps

• Capture usage metrics

• SLA monitoring

Management

Pack Plus for

SOA / CAMM

Service Registry

• Service discovery

• Auto-synchronized with repository

• UDDI v3 implementation

Other “Best of Breed”

Runtime Tooling

20

Complete Solution for Customer Success

• Complete set of service offerings for planning and implementation of SOA Governance from a business, organization and technology perspective

• SOA Governance is integral to SOA Center of Excellence offering• SGF – An agile, efficient decision and accountability framework to

effectively direct and assist in realizing the benefits of SOA

SOA Governance Definition Method SOA Governance Refe rence Model

21

Registry / RepositoryFederated “One-stop-shop” for SOA Assets

• Visibility into SOA assets and their relationships• Automated collection of composites• Categorization of services and artifacts• What’s planned, in development, and already

exists• Dependency and impact analysis

• End-to-End control throughout the lifecycle• Automated lifecycle progression• Policy management• Architecture standards compliance

• Analytics• Automated data collection• Investment ROI• Proactive impact analysis• Value of service & asset portfolio

22

Registry/RepositoryService Definition

Plan and Define

• Define business requirements

• Plan portfolio requirements• Inventory what exists

• Register planned assets

• Define target service portfolio

• Define applicable policies

• Communicate best practices

• Review, approve, and control

23

Registry/RepositoryManage Through Development

Design

• Align services with business objectives & architecture for traceability

• Check for existing assets or services to reuse

• Analyze impact of dependencies

• Initiate contracts between consumers and providers

• Review, approve, and control

24

Registry/RepositoryManage Through Development

Build• Prescribe reusable assets

and artifacts to projects• Reuse services• Monitor architecture

compliance – assets, policies and standards

• Collect application artifacts• Composite assemblies• Service artifacts• Service dependencies

• Test and validate…

25

Registry/RepositoryAssure Quality

Validate and Test• Check design time policy

compliance• JDeveloper for WS-I BP and WSDL• Validation partners: Parasoft,

WebLayers, ITKO, and others

• Apply runtime policies in a pre-production environment

• OWSM for security• EM SOA Mgmt Pack for Service Level

Management• OSB and BPEL PM schema validation• 3rd party synthetic environments

(complementary)

• Automate testing• Oracle ATS • Partners: ITKO, HP …

• Apply runtime policies in production…

26

Advance

• Assign assets to lifecycle stage reviewers

• Check design time policy compliance

• Approve metadata

• Automatically advance lifecycle stage based on approvals – dev to test, test to staging, to staging production

OER Advanced Registration Flows automatically advance services

Registry/RepositoryGovern the Service Lifecycle

27

Deploy• Automate deployment

of processes and services

• Synchronize with the registry for runtime visibility

• Provision runtime policies for services

• Enable for standards-based discovery via UDDI

Registry/Enterprise ManagerSOA Provisioning

28

Oracle Web Service ManagerRuntime Policy Management

Enforce Policy• Federate administration

of policy• Apply message-level

security policies to resources without coding

• Apply access control policies

• Apply transformation and routing policies

• Systematically enforce policies at runtime

29

Monitor and Manage• Discover services in

production• Assure Service Level

compliance• Monitor processes, services • Manage service level targets• Set thresholds, alert on exception

• Model and monitor composite applications• Metrics and model for services

and J2EE artifacts• Extensions for Oracle SOA Suite,

WebCenter suite, WebSphere Portal

• Capture key metrics• Collect availability, performance,

usage, business metrics• Gain visibility into trends

Enterprise Manager SOA Management +Service Level Management

30

VS .Net

VS .Net

Harvesting

In addition to WSDL, XSD, and XSLT…

• Proxy Services• Business Services• Split-Join Flows• XQueries• Dependencies between these• Relationships with assets from SOA

Suite Projects, including BPEL-PM

Harvesting

In addition to WSDL, XSD, and XSLT…

• Proxy Services• Business Services• Split-Join Flows• XQueries• Dependencies between these• Relationships with assets from SOA

Suite Projects, including BPEL-PM

Consumption• Developers consume SOA Suite

assets from their IDEs or repository

• SOA Suite assets in OER are propagated to OSR, and consumed by OSB

Consumption• Developers consume SOA Suite

assets from their IDEs or repository

• SOA Suite assets in OER are propagated to OSR, and consumed by OSB

Runtime Interaction• SOA Suite updates OSR/UDDI with

runtime service info• Services can be published from OSR to

OER• Runtime tooling subscribes to OSR UDDI

for endpoint changes…Closing the Loop:

Metrics from Enterprise Manager are updated in Enterprise Repository

Runtime Interaction• SOA Suite updates OSR/UDDI with

runtime service info• Services can be published from OSR to

OER• Runtime tooling subscribes to OSR UDDI

for endpoint changes…Closing the Loop:

Metrics from Enterprise Manager are updated in Enterprise Repository

Putting it all together

31

Leadership PositionForrester Wave

• Forrester SOA Lifecycle Management Wave – Jan 2008

• Highest scored leader

• Strength in product capabilities and strategy

• Only vendor to get an overall score of 4+ on scale of 1-5

32

Demo

33

Reduce risk from changes • Manage configuration drift and reduce risk of outages• Automate deployment of SOA and J2EE application components• Detect changes and rapidly understand impact

Accelerate time-to-resolution of performance proble ms for SOA applications• Diagnose in production with limited/no overhead• Automatic and complete application instrumentation. No manual intervention required.• Monitor and report service performance based on consumer context

Reduce cost of End-to-End management of complex SOA applications• Single vendor solution for SOA and JEE-based applications• Automate discovery of application components and their dependencies• Comprehensive coverage of all transactions, flows, and business processes

!!

SOA ManagementOnly Oracle delivers…

34

35