1. © 2015 IBM Corporation
The API Economy and
IBM API Management Overview

2. © 2015 IBM Corporation
Agenda
•API Economy
•What is IBM API Management?
•Getting Started

3. API Economy

4. © 2015 IBM Corporation4
Why APIs? Why Now?

5. © 2015 IBM Corporation
Adoption of cloud, analytics, mobile & social
computing is forcing organizations to open IT
assets to new business channels
…and challenging them to rethink the way
they have traditionally approached security & control
Between 2005
and 2020, the
amount of data
in the world will
grow 300X, from
130 to 40,000
exabytes.
81% of adults
use personally
owned mobile
devices for
conducting
business
70% of
employees are
engaged in
social activities
both internally
and externally
73% of
organizations
discovered
cloud usage
outside of IT or
security
policies

6. © 2015 IBM Corporation
Websites
Connected
Appliances
Partners Websites/Sensors
Internet TVs
Smartphones
Tablets
Game
Consoles
Connected Cars
Millions 1993 -
2000
“…in 1993 and 1994 we
were deeming the web as
the next place for FedEx to
be.” -Thomas Wicinski, VP Digital
Marketing FedEx
The way we reach customers is evolving
APIs
Trillions 2013+

7. © 2015 IBM Corporation
What is a Business API?
 A Business API is a public persona for an enterprise; exposing defined
assets, data or services for public consumption
 A Business API is simple for app developers to use, access and understand
 A Business API can be easily invoked
What Value Does a Business API Provide?
 Extends an enterprise and opens new markets by allowing external app
developers to easily leverage, publicize and/or aggregate a company’s
assets for broad-based consumption
What “assets, data or services”
are exposed via a Business API?:
 Product catalogs
 Store listings
 Order status
 Inventory
 Social interaction
Business API = Web API = Productized Service
App Developer

8. © 2015 IBM Corporation
Business Design is an end-to-end Endeavor

9. © 2015 IBM Corporation
Public API Examples – Multiple Industries
Finance –
Trading Economics
API
Provides its users with access to economic data for 196 countries including historical data for
more than 300.000 economic indicators, exchange rates, stock market indexes, government
bond yields and commodity prices. The Trading Economics API allows users to make calls to
get a list of countries, get a list of indicators, get a matrix of countries, get indicators by
country, and get indicators by category.
Financial Services -
StrategYard
is an investment strategy trial service that allows individuals to test and evaluate potential
investment strategies in a simulated environment. The site allows users to work create, test,
and delete multiple strategies, see performance metrics and charts, and automate trading
strategies.
Banking –
BankImport API
Provides users with a single place to track their financials over several accounts from
different banks. The BankImport API allows developers to automatize the processing of
incoming and outgoing money, providing direct access to transactions, bank accounts, and
settings.
Insurance –
Insured Rating
enables users to develop a rate plan reflecting risk levels posed by prospective customers.
Quote requests can then be made via the Insured Rating API which return coverage and
premium information. The data generated helps to manage insurance product offerings and
provide accurate rate quotes matched to determinants of risk.
Energy –
EcoSCADA API
Used to monitor energy consumption and identify wasteful energy use. EcoSCADA is useful
for establishing benchmarks for energy usage across multiple buildings and monitoring their
performance against those benchmarks. The service records data on gas, electricity, and
water consumption as well as other relevant factors. This data is stored in EcoSCADA's
online database where it can be accessed by users directly or via API.
Telecom –
StreamWIDE Call
Screening API
Provides carrier-grade Value Added Services (VAS) to mobile service providers. One of
these services is Call Screening, which allows users to filter calls using acceptance and
denial lists, time-based filters, behavior-based filters, delays on incoming or outgoing
communications, and more.

10. © 2015 IBM Corporation
API Economy Supply Chain

11. © 2015 IBM Corporation

12. © 2015 IBM Corporation

13. © 2015 IBM Corporation
Public, Open-
To-All APIs
Protected,
Open-To-
Partner APIs
Private, Internal
APIs
Typical Audiences

14. © 2015 IBM Corporation
 Drives Adoptions of APIs
 Typically low valued
assets
 Drive brand loyalty
 Enter new channels
For Free
Facebook Login API
provides free
authentication for any
Web / mobile app
Example:
Developer Pays
 Business Asset must be of
high value to the Developer
 For example, marketing
analytics, news,
 Capabilities such as credit
checks
Amazon EC2 Web
Services – APIs charge
per usage to launch
and manage virtual
servers.
Example:
Developer Gets Paid
 Provides incentive for
developer to leverage web
API
 Ad placements
 Percentage of revenue
sold product or services
Google AdSense
APIs pay developers
who include
advertising content
into apps
Example:
Indirect
 Use of API achieves some
goal that drives business
model.
 E.g. Increase awareness
of specific content, or
offerings
eBay Trading APIs
offer developers
access to trading
services extending the
reach of listings and
transactions
Example:
The Business of APIs

15. © 2015 IBM Corporation
 48 hours, 25 developers, over 400,000 API calls
 Impressive 13 pieces of Intellectual Property for ASDA
 Winning Ideas
- “George Go!” - search application using multiple
descriptors
- “Clothing Shaker” - create your outfit by shaking
your device
- “Virtual Fitting Room” - use of Xbox Kinect and
APIs
 IBM API Management on Cloud provided Developer
Portal & secure access to APIs
 https://www.youtube.com/watch?v=biTvnghl5x8
 Looking to transform the Digital Banking landscape:
- Innovative mobile solutions & IoT/ Wearables
 40,000 API calls from more than 100 different groups
 Prototype APIs allowing Developers to interact with fake
accounts
- Account Details (APR/Interest Rate, Available
Credit, Payment Due Date, etc)
- Customer Information (Name, Addresses, Phone
Numbers, Email Addresses)
- Payment Details (Scheduled payments, payment
history, etc)
 IBM API Management on Cloud provided Developer
Portal & secure access to APIs
 https://citimobilechallenge.ciondemand.com/citimobilechallenge/pub/#/apis
New approach to Innovation:
Hackathons, Developer Challenges

16. © 2015 IBM Corporation
How can the API Economy help you?
•Mobile (internal dev) –
•What data/transactions would your own mobile apps need?
•Is there data that is generic (e.g. business locations, rates, etc.)?
•Is there data that is specific to existing customers that should be accessible via
your app?
•Partnering –
•Is partner on boarding a long difficult process? Would self registration of
partners be of value (e.g. more partners, wider geographic coverage)?
•What data/transactions do you share between yourself and your partners?
•Public Composite Apps –
•What apps might others write that could use your data/transactions?
•If there were a comparison app for you vs. your competitors would you want to
be listed as an option?
•What other industry sales might also use your products (e.g. car purchase
needs bank loan)?
•Think Mash-ups – what other APIs might make sense with yours? Mapping?
Social?

17. © 2015 IBM Corporation
How can the API Economy help you?
•Social / Big Data –
•How do your systems interact with social media? Can you spot trends in
social media and raise alerts or take action?
•Can you gain insight on your brand and your competition via social media?
•Can you do real time analytics combining current customer status/behavior
and history?
•Device integration/wearables –
•How are you positioned to integrate the next UI technology (after
Mobile/Tablets)?
•Does your company deal with devices (e.g. cars, appliances,
sensors/meters)? What scenarios can apply to the device (e.g. needs
repair/supplies, needs to send status info, interaction between device and
xxx)?
•Valuable Data –
•What data do you collect on your clients?
•Can your data identify market segments that would be of interest to a non-
related industry? (e.g. expensive cars are purchased in this neighborhood,
lots of child related purchases occurring in this neighborhood).

18. © 2015 IBM Corporation
What API Use Cases
Can You Think Of?
18

19. © 2015 IBM Corporation
Sample API Scenarios for Company Name
•Company name Internal Mobile App development – (already doing) find care
provider, locations and details, member id card, view/search claims,
authorizations and referrals, coverage, manage account/profile, contact us. Did
not see – shop for plans, wellness, estimated costs for treatment, find a
prescription drug/alternatives, drug interaction
•Partner integration – healthcare provider integration APIs, coverage, payments,
episodes of care, Lab integration
•Public API - product information and pricing – comparative healthcare plan app
•Other industry integration – Wellness tool integration, Exercise app, Calendar
integration, Online magazine/article links
•Social Integration – Use Social media to set up groups of common interest /
location related to healthcare issues. Drive business to Horizon BCBS.
•Device Integration – Prepare for wearables as the next UI
•Valuable Data – provide access to customer data collected.

20. © 2015 IBM Corporation
An enterprise architecture for multi-speed transformation
Deploy and Integrate Anywhere
CloudOn Premises
ProcessProcess InteractionInteraction
AppApp AccessAccess
Systems of RecordSystems of Record Systems of InsightSystems of Insight
Cloud Services
EventsEventsAPIsAPIsSecuritySecurityDataData
DataData
IoTIoT
RuntimesRuntimes
API MgmtAPI Mgmt
Event
Hub
Event
Hub
Gateway
SecurityMonitoring & Analytics
InfoInfo
PartnerPartner
Enterprise Integration and MessagingEnterprise Integration and Messaging
Systems of EngagementSystems of Engagement

21. © 2015 IBM Corporation
Challenges with 2 speed IT
Deploy and Integrate Anywhere
CloudOn Premises
Systems of RecordSystems of Record Systems of InsightSystems of Insight Systems of EngagementSystems of Engagement
How to manage the consumption of APIs across the enterprise?
How to provide self-service for internal & external developers?
How to enforce security at runtime?
How to throttle and provide controlled access?
How to introduce change with new versions?
How do I know who is using my service and how much?

22. © 2015 IBM Corporation
API externalization
Multi-tenancy
Rate limiting
Runtime policy enforcement
API deployment
OAuth security management
Data transformation/redaction
Backend service discovery
Version management
Analytics support
Role-based access control
Environment management
Monitoring and notification
API exploration
Self-service sign up
Interactive API testing
App key provisioning
API usage analytics
Rate limit notification
Multiple dev communities
Real API Success = API externalization + realization
API realization

23. What is IBM API Management?

24. © 2015 IBM Corporation
Securely expose your business to an internal/external
developer ecosystem
Provide self-service API
portals to
internal/external app
developers
Expose business services
securely as APIs to select
developer communities &
analyze API usage
Manage & monitor the
entire API platform
On-premise
private
Off-premise
SaaS
Off-premise
dedicated
Hybrid
IBM API Management

25. © 2015 IBM Corporation
Compose a new API, Import APIs, or Discover APIs,
specify security & API behavior, version APIs
Create a Plan, add API resources, choose rate limits,
stage it in a runtime environment, test API resource,
version Plans
Invite developer organizations to use your APIs &
communicate with them
Publish your Plan to select developer organizations &
portals; manage subscribability
Analyze API usage
Managing APIs is simple

26. © 2015 IBM Corporation
IBM API Management
Fully on-premise, multi-tenant solution,
for API providers
IBM DataPower
API Gateway for security, control, integration &
optimized access to a full range of Mobile, Web, API,
SOA, B2B & Cloud workloads
Over a decade of innovation, 10,000+ units sold,
2000+ customer installations worldwide
A single, comprehensive solution to design, secure,
control, publish, monitor & manage APIs

27. © 2015 IBM Corporation
Runtime view
IIB or other ESB
WAS or other app server
Applications/Services
in Java, NET, Cobol,
etc
z/OS, IMS, CICS,
DB2
Mobile
Third party APIs
Web
Business Partner
application
IoT
API Management

28. © 2015 IBM Corporation
Easily manage your APIs, in your private environment
design, secure, control, publish, monitor & manage
Explore API documentation
Provision application keys
Self-service experience
Developer Portal API Manager Management Console
Define and manage APIs
Explore API usage with analytics
Manage API user communities
Provision system resources
Monitor runtime health
Scale the environment
API Gateway
(IBM DataPower)
Enforce runtime policies to control API traffic

29. © 2015 IBM Corporation29
API Management solution
Product APIs allow
customers to interact
with the API
Management solution,
and extend/customize
Product APIs Management layer Gateway layer
The management layer
embodies the capability for
organizations to define,
manage, expose and
control APIs
Provides API Manager,
Developer Portal and
Management Console
API configurations are
deployed to the gateway,
which provides the
enforcement point for
runtime policies to control
API traffic
Gateway is DataPower
physical or virtual

30. © 2015 IBM Corporation© 2015 IBM Corporation
On
premise
On CloudDedicate
d
3 | On premise
Behind your firewall for most sensitive
workloads & complete control
API Manager Cloud Management Console*Developer Portals
API Management – The way you want it
2 | On Cloud
Maximize on cloud economics and
agility. Offered as SaaS on SoftLayer
and also available through Bluemix
1 | Dedicated
With Bluemix Dedicated API
Management, everything is dedicated and
connected to you — agility of public
cloud, yet feels like home

31. Embrace the API Economy on the Cloud
IBM API Management Service (SaaS)
• Design & Secure APIs, Publish to developer portals,
Analyze API usage & performance
• A resilient and highly available API runtime
infrastructure with built-in failover, redundancy, &
dynamic scaling
• Seamlessly move APIs & Plans from public to private
cloud or on-prem for complete flexibility
• Identical capabilities of on-premise
• 30-day full feature trial, self-service pay with credit
card
• Grow as you need: Pricing based on API calls &
developer accounts with optional logging of API
payload
• Now in U.S., Japan & Singapore data centers
ibm.biz/apimsaas

32. IBM API Management on Bluemix
Enterprise API Management for all of your Bluemix APIs
Value: Secure, Control, Publish, Analyze and Manage your APIs. Discover APIs from on
premise sources.
2
Key Capabilities:
•Manage your APIs– Manage your Bluemix APIs to
allow secure, governed and monitored usage
•API Discovery– Discover APIs from on prem sources
such as System Z and IBM Integration Bus and
publish them into Bluemix
•Socialize- Invite partners to consume and interact
via the Developer Portal and publish into their
Bluemix orgs
What’s new?
•A Bluemix service that seamlessly launches an API
Management experience to extend your API reach
IBM Hybrid Integration Services

33. © 2015 IBM Corporation
API Developer
• How do I assemble APIs?
• How do I manage security?
• Will the infrastructure scale?
• How do I measure
performance?
App Developer
•Where do I access APIs?
•How do I understand the
APIs?
•How do I measure
success?
API Product Manager
• How can I rapidly release & update my APIs?
• How do I publicize my API?
• How do I measure success?
Operations Lead
•How do I manage all the API
Environments that are being
requested?
•How can I scale each
environment?
•How can I easily find and fix
issues?
API Success Requires Addressing Needs of
Multiple Stakeholders

34. © 2015 IBM Corporation
 Intuitively and iteratively define APIs
and associated policies
 Rapidly assemble APIs via
configuration, not coding
 Minimize risk with industry leading
security & scalability
Define
API
Developer
Assemble
Meter
SecureDeploy,
Test & Debug
Monitor
Scale
Version
34
API Developer: Create, Secure & Version APIs
Simple interface accelerates iterative API development &
deployment

35. © 2015 IBM Corporation
API Developer:
Assemble New APIs Through Configuration
 Assemble a new API
by combining multiple
REST or SOAP
services into a
composite API
 Provide examples of
the request and
response messages,
headers and
parameters
 Drag and connect
linking the request and
response messages
 Transform the
message elements
with a click

36. © 2015 IBM Corporation
API Providers & Consumers:
Test API readiness with Ready! API plugin
Export:
Define new APIs in
Ready! API product
by uploading
Swagger, WADL,
RAML, WSDL, etc.,
and then test the
API.
 Commit to a full
range of tests –
functional, load,
security
 When ready, click a
button to
Export API to insert
the tested API into
API Manager UI
Import:
Use Ready! API
testing platform to
Import SOAP &
REST API
definitions directly
from IBM API Mgmt
Dev portal for
unit/functional
testing, load testing,
service virtualization
& more
 Select any API from
Dev Portal
 Auto-generate test
suite
 Validate
functionality and &
API Consumers API Providers

37. © 2015 IBM Corporation
Custom API Portal using IBM API Mgmt & Drupal CMS

38. © 2015 IBM Corporation
API Provider: “Productize” APIs using Plans
 Introduce API Trial Use
 Free, limited plans can
be made available
alongside premium plans
 For example, a free plan
could be unrestricted,
and a premium plan
restricted
 Include multiple APIs
and Resources per
Plan
 Version your Plans
 Apply Rate Limit by
Plan or Resource
 Reject calls when limit
reached

39. © 2015 IBM Corporation
API Provider: Publish your APIs to multiple
developer portals
Multiple Developer Portals
API Manager
API Provider
App Developers
In group 1
App Developers
in group 2
Securely share APIs/Plans with various
select developer communities
Fine grained plan deployment
Non-disruptive Publish: Replace a currently
published version of a Plan without any
disruption in API availability

40. © 2015 IBM Corporation
API Provider: Gain Business Insights
• Pinpoint key
market
fluctuations and
find correlations
related to your
business
• Analytics for both
API provider and
application
developer:
• Analyze
performance of
APIs
• Enables chargeback
or billing for API
consumption

41. © 2015 IBM Corporation
App Developer: Register application
 Register new
application
 Request
security keys
with enhanced
privacy
 Deferred
retrieval of
client secret

42. © 2015 IBM Corporation
App Developer: Analyze App Performance,
Get notified
 Monitor most
active
applications and
APIs
 Rate limit
developer
notifications

43. © 2015 IBM Corporation
IT Admin: Manage Overall Environment*
 At-a-glance
server
utilization
metrics
 Management &
Gateway Server
utilization -
CPU, Memory,
Disk
 Usage over
time available
by drilling down
* Not applicable to SaaS

44. © 2015 IBM Corporation
Enabling businesses to join the API Economy
IBM API Management - on-cloud & on-premise
Engage with app developers through portals
• API exploration
• Self-service sign up
• Interactive API testing
• App & Key management
• API usage analytics
• Rate limit notification
• Multiple dev communities
• Build custom portal with blogs, forums
• Define & Secure REST & SOAP APIs, Publish to multiple
developer portals & users, Analyze API usage &
performance
• A resilient integrated API runtime gateway infrastructure
with IBM DataPower Gateway for enforcement of runtime
policies to secure & control API traffic
• Seamlessly move APIs & Plans from public to private cloud
or on-prem for complete flexibility
Define, publish & manage APIs
• OAuth security management
• Backend service discovery
• API lifecycle management
• API subscription management
• Data transformation/redaction
• Rate limiting at Plan/Resource level
• API user & Plan management
• API deployment to Gateway
• API security enforcement
• API Analytics to gain business
insight
• Custom roles & role-based access
control
Manage API environment
• Administer & scale system
resources
• Monitor runtime health
• Multi-tenancy
REST APIs to extend/customize
• Developer Portal
• User onboarding
• Integration with API testing
tools (SoapUI NG Pro,
Ready! API)
• Integration with Content
Management System
(Drupal)

45. © 2015 IBM Corporation
Developer
organizations
(consume APIs
develop Apps)
API Provider
organizations
Users
Cloud
system
admin
Clusters
of
servers
User registry
(identity
provider)
email server
configuration
Anatomy of API Management
IBM /apimanagement 15
Developer
portal
API Manager
Cloud
Management
Console

46. © 2015 IBM Corporation
Where does API Management fit?

47. © 2015 IBM Corporation
A successful API initiative requires end-to-end focus
APIs
Apps
Social Feedback and Communities
Marketplace
Self-Service Portal: Registration • Documentation • Sandbox
Security, Metering and
Control
API Design and Integration
Analytics and Monetization
API Lifecycle Management
Composition
Infrastructure Services
DevOps and App Management
Mobile Services
Internal
Developers
Partner
Developers
External
Developers
Channels: Smartphones • Tablets • Desktops • Cars • TVs • Others
Services: Data • Processes • Applications
Cloud

48. © 2015 IBM Corporation
 Leverage a robust API Gateway to launch your API platform
• An API Management platform needs a robust, secure and scalable API Gateway for runtime
enforcement
• IBM API Management has optimized integration with IBM DataPower gateway appliances
• Single pane of glass to manage APIs, Plans, Users, Clusters to provide a unified operational view
• DataPower is the industry leading security & integration gateway for a range of workloads, with over
2200 customers and 10,000 units deployed worldwide
 Flexible deployment options
• IBM API Management is available as on-premise, hosted, and SaaS
 Thought Leadership & Active developer community
• Free access to experts to help with API strategy
• Discussion forums, blog posts, events at developer.ibm.com/api
• 1M+ participants on IBM developerWorks
 Access to a worldwide marketplace
• IBM Bluemix and IBM Cloud marketplace represent a unique broad developer audience, building
apps
 Choose the API Mgmt vendor strategically
• IBM is investing heavily in API Mgmt, Mobile, Cloud, Analytics, IoT & Big Data
48
Why IBM?

49. © 2015 IBM Corporation
Key Points to Remember
49
1.IBM DataPower has NOT partnered with any API Mgmt vendor
–There is NO product-level integration
2.IBM provides immediate feature availability
–Take advantage of DataPower new features as soon as it is GA’ed by IBM instead of waiting
months/years for others to add to their product e.g. WebSockets support added mid-2014 in
DataPower v7.0
3.IBM APIM/DataPower natively integrates with WAS, WXS, MobileFirst & Bluemix
4.IBM APIM generates efficient configurations/policies for DataPower to execute/enforce
–Beware of others creating inefficient policies for DataPower. This may result in more
DataPower needed
5.IBM APIM has self-contained virtual appliance packaging
–Beware of others requiring a DB plus addressing DB replication for analytics data
6.IBM’s APIM solution deployment topology is simple – mgmt & gateway
–Beware of others requiring various components sitting on separate servers, plus load balancers
& another DB for HA
7.API Management is strategic to IBM
–IBM is investing heavily in API Mgmt, Mobile, Cloud, Integration, Analytics, IoT & Big Data
–We plan to provide a unified platform for Mobile App Mgmt & API Mgmt using a single gateway
8.With IBM, customers gain access to a worldwide marketplace
–IBM Bluemix & IBM Cloud marketplace represent a unique broad developer audience, building
apps
9.IBM provides Thought Leadership & Active developer community with 1M+ participants
–Free access to experts to help with API strategy
–Discussion forums, blog posts, events at developer.ibm.com/apimanagement

50. © 2015 IBM Corporation
Getting Started
1. Executive and Business Backing
• APIs are a product to be delivered, not a technology for IT to improve efficiency
• Lack of executive or business buy-in will result in a technology implementation with no/little impact on
the business.
• Leadership absolutely must participate and back the initiative.
2. Establish a strategy and goals
• Understand why you are executing an API strategy
• Set Goals for the initiative with time frames and reporting metrics
3. Commitment to Roles, Responsibilities, and Resources
• There will need to be resources dedicated to the API initiative.
• Enable enough key resources to make governance effective.
4. Get the Message Out
• Involve some folks skilled in formal communication and education
campaigns.
• Do some API evangelist work
• The core team’s role(s) must be understood and propagated
• Collect and Publish Metrics

51. © 2015 IBM Corporation
API developer
community site
on APIs,
API economy, API Mgmt
Includes
API community forum
API events
Best practices blog
Videos
developer.ibm.com/api

52. API Management Resources
Product Page
• ibm.com/apimanagement
API developer community
• developer.ibm.com/api
Twitter
• @ibmapimgt
YouTube Channel
• youtube.com/ibmapimanagement
Slideshare
• slideshare.net/ibmapimgmt
Speaker Deck
• speakerdeck.com/ibmapimgmt
52

53. Backup
53
The Backup Section contains many more
detailed slide showing product functionality.
You can choose to leave this in as backup or
remove it.
Or, if you want to present this section, replace
the product slides earlier in the presentation
with these. Note: all of the earlier slides are
included here too. So, you can just delete the
earlier ones and cut / paste these in their
place.

54. 54
App Developer Portal

55. All-new advanced developer portal,
based on a content management system

56. Easily customize your developer portal look and feel
ACME FAQs
ACME BLOG

57. Option to enable self-service
developer registration

58. Getting started

59. Browse APIs

60. View API detail, test API & post comment

61. App registration and
subscription detail

62. Provide a self-service,
guided developer experience

63. Discussion forum, per API,
to encourage collaboration

64. 64
API Manager console

65. Intuitively define REST or SOAP APIs by
importing Swagger 2.0 or WSDL files
Or discover from System z or service registry
(WSRR)
Or rapidly assemble APIs via configuration,
not coding
Search for, add custom tags to, and mark
favorite APIs for easier discovery
Define
API
Developer
Assemble
Meter
SecureDeploy,
Test & Debug
Monitor
Scale
Version
65
API Developer: Create, Secure & Version APIs
Simple interface accelerates iterative API development & deployment

66. API Developer: Assemble New APIs Through Configuration
 Assemble a new API
by combining multiple
REST or SOAP
services into a
composite API
 Provide examples of
the request and
response messages,
headers and
parameters
 Drag and connect
linking the request
and response
messages
 Transform the
message elements
with a click

67. API Developer: Secure the API
 Identify application
with Client ID & Secret
 Authenticate using
LDAP or
Authentication URL
 Authorize using OAuth
2.0 support with
implicit grant type,
authorization code,
resource owner, client
credentials
 Set configuration
properties

68. API Developer: Test the API and Debug
 Interactive test of an API
resource in just one click
 Provide parameters and
receive response
 Allows quick, iterative
develop / deploy / test
cycles
 Debug responses from
every step

69. API Providers & Consumers:
Test API readiness with round-trip support for REST & SOAP APIs
Export:
Define new APIs in Ready!
API product by uploading
Swagger, WADL, RAML,
WSDL, etc., and then test
the API.
 Commit to a full range of
tests – functional, load,
security
 When ready, click a
button to Export API to
insert the tested API into
API Manager UI
Import:
Use Ready! API testing
platform to Import SOAP
& REST API definitions
directly from IBM API
Mgmt Dev portal for
unit/functional testing,
load testing, service
virtualization & more
 Select any API from Dev
Portal
 Auto-generate test suite
 Validate functionality
and resiliency
 Virtualize for application
testing
&
API Consumers API Providers

70. 70
Share APIs with developers

71. API Provider: “Productize” APIs using Plans
 Plans are the enforceable
contracts that contain
API resources
 E.g. a Free limited plan
can be made available
alongside a Premium
plan
 Premium plan
subscription could
require approval
 Include multiple APIs and
Resources per Plan
 Apply Rate Limit by Plan
or Resource
 Optionally reject calls
when limit reached
 Version your Plans

72. API Provider can publish APIs to multiple developer portals
Multiple Developer Portals
API Manager
API Provider
App
Developers
In group 1
App
Developers in
group 2
Securely share Plans of API resources with
select developer communities

73. 73
Lifecycle Management,
Plan Visibility &
Subscription Management

74. View for managing
API and plan lifecycle

75. Filter by lifecycle state

76. Actions for managing
API and plan lifecycle

77. Manage plan visibility,
subscribability and gateway enforcement option

78. Manage application subscriptions
across plans

79. Migrate subscriptions between plans

80. Optional approval steps for
publishing and lifecycle actions

81. 'Macro actions' for key tasks

82. Manage transition from one
version to another

83. Managed deprecation and
retirement of plans at end of life

84. 84
API Provider
user management

85. Add and remove users,
assign roles & define custom roles

86. 86
Analytics

87. API Provider: Gain Business Insights
• Pinpoint key
market
fluctuations and
find correlations
related to your
business
• Analytics for
both API
provider and
application
developer:
• Analyze
performance of
APIs
• Enables
chargeback or
billing for API
consumption

88. API Provider: Analyze API usage in IBM Cognos
• Analytics data is
captured in a csv
file and then
imported into IBM
Cognos BI for
usage with existing
enterprise data
• Simple drag and
drop of .csv file
• Analyze
performance of
APIs
• Time to Serve
Request for GET &
POST transactions
• Calls from a Mobile
App using a
specific API
• REST API also
available for
analytics extract

89. 89
Manage Environments

90. For an environment,
configure gateway clusters to stage & deploy
Plans/APIs

91. For an environment,
manage portals to publish Plans and APIs

92. For an environment,
manage permissions for approving plan lifecycle state
changes

93. 93
Manage SSL Profiles

94. Manage SSL profiles to
secure transmission of data using SSL certificates

95. 95
Cloud

96. IBM API Management on Cloud (SaaS)
Embrace the API Economy in the Cloud
• Design & Secure APIs, Publish to developer portals,
Analyze API usage & performance
• A resilient and highly available API runtime
infrastructure with built-in failover, redundancy & dynamic
scaling on IBM SoftLayer
• Seamlessly move APIs & Plans from public to private
cloud or on-prem for complete flexibility
• 30-day full feature trial, self-service pay with credit card
• Grow as you need: Pricing based on API calls &
developer accounts with optional logging of API payload
• Identical capabilities of on-premise, except for infra
admin via CMC and direct gateway access
• Manage your APIs in Bluemix
ibm.biz/apimsaas
Global Network
London
FrankfurtTokyo
Singapore
San Jose
Houston

97. IBM Interconnect 20157
API Management comes to Bluemix

98. IBM API Management on Bluemix
Enterprise API Management for all of your Bluemix APIs
Value: Secure, Control, Publish, Analyze and Manage your APIs. Discover APIs from on
premise sources.
2
Key Capabilities:
•Manage your APIs– Manage your Bluemix APIs to
allow secure, governed and monitored usage
•API Discovery– Discover APIs from on prem
sources such as System Z and IBM Integration Bus
and publish them into Bluemix
•Socialize- Invite partners to consume and interact
via the Developer Portal and publish into their
Bluemix orgs
What’s new?
•A Bluemix service that seamlessly launches an API
Management experience to extend your API reach
IBM Hybrid Integration Services