Welcome!

Oracle Authors: Elizabeth White, Liz McMillan, Jason Bloomberg, Carmen Gonzalez, PagerDuty Blog

Related Topics: Oracle, Java, SOA & WOA

Oracle: Article

Oracle SOA Suite

An integrated and standards-based platform

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

Sierra Atlantic has more than a decade of experience implementing application integration solutions. We've worked with a variety of vendors' products and have seen the integration landscape mature over the past six years.

Building an SOA Solution
Building a typical SOA application involves the following activities:

  1. Building services: This may include service-enabling existing business logic using application or technology adapters, or writing new business logic, in J2EE or another language.
  2. Enabling service communication: Services must be able to reliably communicate with each other and with back-end applications. SOA encourages loose coupling. Capabilities such as messaging, data transformation, and message routing, which are often captured in an Enterprise Service Bus, are key.
  3. Wiring services together into business flows: Implementing business processes as orchestrations of services enables easier change. High-level representations of business processes, such as Business Process Execution Language (BPEL), an XML-based language for expressing service orchestration, provides the basis for agile business processes.
  4. Securing services: Within an SOA environment, you must be able to effectively and consistently secure and manage services, and apply different policies (security, auditing, logging) depending on who or what is interacting with a particular service. You should be able to do this without changes to the services.
  5. Optimizing services: A very important capability within an SOA environment is the ability to effectively monitor services and events, which is captured in a Business Activity Monitoring (BAM) solution. BAM provides users with an event aggregation and correlation platform that allows for building a state model defining relationships between various events that impact the operations business KPIs.
Oracle says it has the most comprehensive and mature SOA platform in the market. At first glance, we were impressed to see that its suite addresses all the requirements we mentioned above:
  • Oracle JDeveloper to build services, to service-enable existing assets
  • Oracle ESB for messaging and routing
  • Oracle BPEL Process Manager to wire services together into business flows
  • Oracle Web Services Manager for security and policy management for services
  • Oracle BAM for business-level monitoring and optimization of business services and processes
  • Oracle Application Server 10g R3/ Oracle Fusion Middleware - the J2EE 1.4 runtime on which all this infrastructure may be deployed
In this review, we focused on three components of the Oracle SOA Suite - Oracle BPEL Process Manager (Oracle BPEL PM), Oracle Web Services Manager and Oracle Business Activity Monitoring (Oracle BAM). We give an overview of each of these components, and show each of their capabilities in light of an order-processing scenario - a problem well suited to the application of SOA. We didn't review the full capabilities of Oracle JDeveloper, Oracle Application Development Framework (Oracle ADF), Oracle ESB and the core J2EE-compliant runtime. This is because you can develop apps for the Oracle SOA Suite with third-party tools such as Eclipse; the Suite's components can be deployed to any J2EE application server; and Oracle BPEL Process Manager, Oracle BAM, and Oracle Web Services Manager can integrate with any standards-based messaging solution.

Oracle BPEL Process Manager
Business processes are at the heart of any business. They touch different applications, persons, and business partners during their execution and evolve according to changing business requirements. Some of them are automated with technology solutions. SOA can make a key contribution to enabling easy-to-develop, maintain, and easy-to-adapt business processes.

BPEL makes it easier for organizations to adapt to changing business needs on the fly. Oracle BPEL Process Manager, which is in its fourth release, has been on the market since 2001 (when it was acquired from Collaxa). It includes a BPEL engine, a management console, and a graphical interface for wiring services, as well as robust messaging and routing capabilities. We like that Oracle BPEL Process Manager is engineered to run on top of all major J2EE-compatible application servers. This helps organizations preserve their existing IT infrastructure and in-house resources.

One of the most important features in any BPM tool is the ability to model business processes graphically. Oracle BPEL Process Designer offers a graphical modeling environment for this task, and its drag-and-drop features make it easy to use. It is targeted at the developer and what Oracle calls Functional Developer/ Business Savvy. To create a more full-featured modeling environment for business analysts, Oracle partners with pure-play BPM modeling vendors including IDS Scheer and Proforma.

Oracle BPEL Process Manager provides native support for standards such as BPEL, XML, XSLT, XPATH, JMS, JCA, and Web services, making it a good solution for enabling SOAs.

Processes interact with heterogeneous applications and, in many cases, require human intervention. These applications speak different languages. In order to connect to various systems, Oracle BPEL Process Manager ships with a set of technology and application adapters to let you connect with endpoints that are not exposed as services. These include file, file transfer protocol (FTP), advance queues (AQs), database (DBs), Oracle applications, and other ERP application adapters.

Graphical tooling is also included within JDeveloper for performing data transformations to reconcile different data formats within XML documents being transmitted between services.

Many industry experts are concerned about BPEL's lack of workflow support. Oracle has simply built an application on top of their product that implements workflow capabilities - in theory, workflow built on top of Oracle BPEL Process Manager should be portable across BPEL engines. These built-in, standards-based workflow services are linked to a BPEL process through a WSDL contract. A BPEL process assigns a task to a user or role by making a service call, and waits for a response.

Designing business processes is only one piece of the puzzle. How do you secure these services to prevent unauthorized access? How do you apply security, audit and logging policies to services? First, you need a cohesive security policy infrastructure that governs access to these services. Oracle Web Services Manager, part of Oracle's Identity Management solution, is Oracle's solution.

Oracle Web Services Manager
Security is important for any kind of distributed computing environment. Oracle Web Services Manager, which Oracle obtained last year through its acquisition of Oblix, Inc., lets you define and implement security and operational policies for services. As a developer, you don't want to worry about applying security policies - authentication, encryption and digital signatures. Web Services Manager enables these policies to be enforced from outside the service.

As with Oracle BPEL Process Manager, we like that Oracle Web Services Manager supports multiple Web services platforms and providers including BEA Systems, IBM, Microsoft, Netegrity, TIBCO, and Verisign. It also provides out-of-the-box support for multiple transports such as HTTP, HTTPS, JMS, and IBM Websphere MQ, and multiple messaging models including synchronous and asynchronous messaging.

Oracle Web Services Manager includes two enforcement components that ensure maximum deployment flexibility: policy gateways, which are deployed before a group of applications or services and intercept inbound requests to services, and policy agents, which run in-process with the service that is being secured.

Oracle Web Services Manager policies are a set of operational tasks that are performed when service requests are processed, and the responses between a service client and a service provider at specified policy-enforcement points. Each task is implemented as a policy step that addresses a specific operation (such as authentication, authorization, encryption, decryption, security signature, token or credential verification, transformation, auditing, logging) that's performed on either a Web services request or a response message.

We like the management console, which also monitors each Web services' performance. The graphical dashboard shows overall statistics, including security metrics such as unauthorized access attempts, and service figures including the average service failure rate and average registered service latency. You can drill down into the dashboard by service to see statistics on individual operations. You can also define and monitor individual service levels.

Oracle BPEL Process Manager and Oracle Web Services Manager let you design, orchestrate, and secure services. But how do you gain real-time visibility into business entities and their interactions?

Oracle Business Activity Monitoring
The promise of BAM is to push information to users via visual dashboards and alerts, helping them improve operational effectiveness and make informed decisions. As it relates to SOA, services and events, which provide real-time visibility into business processes, people, and systems need to be monitored. The ability to aggregate service metrics and deliver actionable information on critical business service parameters to business users is also key.

The Oracle BAM architecture uses functions including messaging, data integration, data caching, analytics monitoring, alerting, and reporting to collect, analyze and deliver critical information. We like that these functions support integration with different industry-standard business applications such as JMS, JCA, Web services, file system, MQs (IBM, MS, Sonic), TIBCO, Webmethods, and BEA WebLogic. This means that Oracle BAM can collect real-time information from heterogeneous environments.

In fact, Oracle BAM is generally targeted at business users. However, before they can start creating and viewing reports, someone (the developer/ architect) must create the underlying data model and populate it. Oracle BAM segregates the two tasks. While developers can use Oracle BAM Architect to create the data objects and rules, business users can use Oracle BAM Active Studio's simple interface to create reports. This means that you as the developer just plug-in the data sources - the business users can build their own dashboards.

After reviewing the capabilities of the product suite, we wanted to model a real-world scenario to more completely assess its capabilities. For this, we built a use case that captures a typical order-processing business process.


More Stories By Feroze Mohammed

Feroze Mohammed is the senior vice president, product engineering, custom development and integrations, Sierra Atlantic, Inc. He is also responsible for Sierra Atlantic's own R&D and product development initiatives. Feroze holds an master's degree in computer
applications from the University of Hyderabad.

More Stories By Lawrence Pravin

Lawrence Pravin is the product manager, Process Integration Packs, Sierra Atlantic, Inc. He has over 10 years of experience in packaged applications, and has deep integration expertise with Oracle, PeopleSoft, Siebel and SAP applications. Lawrence holds a computer science and engineering degree from the University of Madras.

Comments (4) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
shaker 12/22/06 03:07:17 PM EST

Very informative and good insights into Oracle's SOA offerings. Good work guys ! May be you should share your own product/offerings visa-vis other vendors?

Baswa Shaker
http://www.shakersphere.com

SOA Web Services Journal News 11/30/06 12:02:56 AM EST

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

JDJ News Desk 05/05/06 04:39:48 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

SYS-CON Italy News Desk 05/05/06 04:08:56 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

@ThingsExpo Stories
“The age of the Internet of Things is upon us,” stated Thomas Svensson, senior vice-president and general manager EMEA, ThingWorx, “and working with forward-thinking companies, such as Elisa, enables us to deploy our leading technology so that customers can profit from complete, end-to-end solutions.” ThingWorx, a PTC® (Nasdaq: PTC) business and Internet of Things (IoT) platform provider, announced on Monday that Elisa, Finnish provider of mobile and fixed broadband subscriptions, will deploy ThingWorx® platform technology to enable a new Elisa IoT service in Finland and Estonia.
Advanced Persistent Threats (APTs) are increasing at an unprecedented rate. The threat landscape of today is drastically different than just a few years ago. Attacks are much more organized and sophisticated. They are harder to detect and even harder to anticipate. In the foreseeable future it's going to get a whole lot harder. Everything you know today will change. Keeping up with this changing landscape is already a daunting task. Your organization needs to use the latest tools, methods and expertise to guard against those threats. But will that be enough? In the foreseeable future attacks w...
As enterprises move to all-IP networks and cloud-based applications, communications service providers (CSPs) – facing increased competition from over-the-top providers delivering content via the Internet and independently of CSPs – must be able to offer seamless cloud-based communication and collaboration solutions that can scale for small, midsize, and large enterprises, as well as public sector organizations, in order to keep and grow market share. The latest version of Oracle Communications Unified Communications Suite gives CSPs the capability to do just that. In addition, its integration ...
Building low-cost wearable devices can enhance the quality of our lives. In his session at Internet of @ThingsExpo, Sai Yamanoor, Embedded Software Engineer at Altschool, provided an example of putting together a small keychain within a $50 budget that educates the user about the air quality in their surroundings. He also provided examples such as building a wearable device that provides transit or recreational information. He then reviewed the resources available to build wearable devices at home including open source hardware, the raw materials required and the options available to power s...
Today’s enterprise is being driven by disruptive competitive and human capital requirements to provide enterprise application access through not only desktops, but also mobile devices. To retrofit existing programs across all these devices using traditional programming methods is very costly and time consuming – often prohibitively so. In his session at @ThingsExpo, Jesse Shiah, CEO, President, and Co-Founder of AgilePoint Inc., discussed how you can create applications that run on all mobile devices as well as laptops and desktops using a visual drag-and-drop application – and eForms-buildi...
From telemedicine to smart cars, digital homes and industrial monitoring, the explosive growth of IoT has created exciting new business opportunities for real time calls and messaging. In his session at @ThingsExpo, Ivelin Ivanov, CEO and Co-Founder of Telestax, shared some of the new revenue sources that IoT created for Restcomm – the open source telephony platform from Telestax. Ivelin Ivanov is a technology entrepreneur who founded Mobicents, an Open Source VoIP Platform, to help create, deploy, and manage applications integrating voice, video and data. He is the co-founder of TeleStax, a...

ARMONK, N.Y., Nov. 20, 2014 /PRNewswire/ --  IBM (NYSE: IBM) today announced that it is bringing a greater level of control, security and flexibility to cloud-based application development and delivery with a single-tenant version of Bluemix, IBM's platform-as-a-service. The new platform enables developers to build ap...

We certainly live in interesting technological times. And no more interesting than the current competing IoT standards for connectivity. Various standards bodies, approaches, and ecosystems are vying for mindshare and positioning for a competitive edge. It is clear that when the dust settles, we will have new protocols, evolved protocols, that will change the way we interact with devices and infrastructure. We will also have evolved web protocols, like HTTP/2, that will be changing the very core of our infrastructures. At the same time, we have old approaches made new again like micro-services...
Disruptive macro trends in technology are impacting and dramatically changing the "art of the possible" relative to supply chain management practices through the innovative use of IoT, cloud, machine learning and Big Data to enable connected ecosystems of engagement. Enterprise informatics can now move beyond point solutions that merely monitor the past and implement integrated enterprise fabrics that enable end-to-end supply chain visibility to improve customer service delivery and optimize supplier management. Learn about enterprise architecture strategies for designing connected systems tha...
SYS-CON Events announced today that CodeFutures, a leading supplier of database performance tools, has been named a “Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9–11, 2015, at the Javits Center in New York, NY. CodeFutures is an independent software vendor focused on providing tools that deliver database performance tools that increase productivity during database development and increase database performance and scalability during production.
The Internet of Things is a misnomer. That implies that everything is on the Internet, and that simply should not be - especially for things that are blurring the line between medical devices that stimulate like a pacemaker and quantified self-sensors like a pedometer or pulse tracker. The mesh of things that we manage must be segmented into zones of trust for sensing data, transmitting data, receiving command and control administrative changes, and peer-to-peer mesh messaging. In his session at @ThingsExpo, Ryan Bagnulo, Solution Architect / Software Engineer at SOA Software, focused on desi...
"For over 25 years we have been working with a lot of enterprise customers and we have seen how companies create applications. And now that we have moved to cloud computing, mobile, social and the Internet of Things, we see that the market needs a new way of creating applications," stated Jesse Shiah, CEO, President and Co-Founder of AgilePoint Inc., in this SYS-CON.tv interview at 15th Cloud Expo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Recurring revenue models are great for driving new business in every market sector, but they are complex and need to be effectively managed to maximize profits. How you handle the range of options for pricing, co-terming and proration will ultimately determine the fate of your bottom line. In his session at 15th Cloud Expo, Brendan O'Brien, Co-founder at Aria Systems, session examined: How time impacts recurring revenue How to effectively handle customer plan changes The range of pricing and packaging options to consider
Things are being built upon cloud foundations to transform organizations. This CEO Power Panel at 15th Cloud Expo, moderated by Roger Strukhoff, Cloud Expo and @ThingsExpo conference chair, addressed the big issues involving these technologies and, more important, the results they will achieve. Rodney Rogers, chairman and CEO of Virtustream; Brendan O'Brien, co-founder of Aria Systems, Bart Copeland, president and CEO of ActiveState Software; Jim Cowie, chief scientist at Dyn; Dave Wagstaff, VP and chief architect at BSQUARE Corporation; Seth Proctor, CTO of NuoDB, Inc.; and Andris Gailitis, C...
The Industrial Internet revolution is now underway, enabled by connected machines and billions of devices that communicate and collaborate. The massive amounts of Big Data requiring real-time analysis is flooding legacy IT systems and giving way to cloud environments that can handle the unpredictable workloads. Yet many barriers remain until we can fully realize the opportunities and benefits from the convergence of machines and devices with Big Data and the cloud, including interoperability, data security and privacy.
Code Halos - aka "digital fingerprints" - are the key organizing principle to understand a) how dumb things become smart and b) how to monetize this dynamic. In his session at @ThingsExpo, Robert Brown, AVP, Center for the Future of Work at Cognizant Technology Solutions, outlined research, analysis and recommendations from his recently published book on this phenomena on the way leading edge organizations like GE and Disney are unlocking the Internet of Things opportunity and what steps your organization should be taking to position itself for the next platform of digital competition.
In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect at GE, and Ibrahim Gokcen, who leads GE's advanced IoT analytics, focused on the Internet of Things / Industrial Internet and how to make it operational for business end-users. Learn about the challenges posed by machine and sensor data and how to marry it with enterprise data. They also discussed the tips and tricks to provide the Industrial Internet as an end-user consumable service using Big Data Analytics and Industrial Cloud.
SYS-CON Media announced that Splunk, a provider of the leading software platform for real-time Operational Intelligence, has launched an ad campaign on Big Data Journal. Splunk software and cloud services enable organizations to search, monitor, analyze and visualize machine-generated big data coming from websites, applications, servers, networks, sensors and mobile devices. The ads focus on delivering ROI - how improved uptime delivered $6M in annual ROI, improving customer operations by mining large volumes of unstructured data, and how data tracking delivers uptime when it matters most.
SYS-CON Events announced today that ActiveState, the leading independent Cloud Foundry and Docker-based PaaS provider, has been named “Silver Sponsor” of SYS-CON's DevOps Summit New York, which will take place June 9-11, 2015, at the Javits Center in New York City, NY. ActiveState believes that enterprises gain a competitive advantage when they are able to quickly create, deploy and efficiently manage software solutions that immediately create business value, but they face many challenges that prevent them from doing so. The Company is uniquely positioned to help address these challenges thro...
SYS-CON Media announced that Cisco, a worldwide leader in IT that helps companies seize the opportunities of tomorrow, has launched a new ad campaign in Cloud Computing Journal. The ad campaign, a webcast titled 'Is Your Data Center Ready for the Application Economy?', focuses on the latest data center networking technologies, including SDN or ACI, and how customers are using SDN and ACI in their organizations to achieve business agility. The Cisco webcast is available on-demand.