Welcome!

Recurring Revenue Authors: Kevin Benedict, Yeshim Deniz, Liz McMillan, AppNeta Blog, Elizabeth White

Related Topics: Recurring Revenue, Java IoT, Microservices Expo

Recurring Revenue: Article

Oracle SOA Suite

An integrated and standards-based platform

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

Sierra Atlantic has more than a decade of experience implementing application integration solutions. We've worked with a variety of vendors' products and have seen the integration landscape mature over the past six years.

Building an SOA Solution
Building a typical SOA application involves the following activities:

  1. Building services: This may include service-enabling existing business logic using application or technology adapters, or writing new business logic, in J2EE or another language.
  2. Enabling service communication: Services must be able to reliably communicate with each other and with back-end applications. SOA encourages loose coupling. Capabilities such as messaging, data transformation, and message routing, which are often captured in an Enterprise Service Bus, are key.
  3. Wiring services together into business flows: Implementing business processes as orchestrations of services enables easier change. High-level representations of business processes, such as Business Process Execution Language (BPEL), an XML-based language for expressing service orchestration, provides the basis for agile business processes.
  4. Securing services: Within an SOA environment, you must be able to effectively and consistently secure and manage services, and apply different policies (security, auditing, logging) depending on who or what is interacting with a particular service. You should be able to do this without changes to the services.
  5. Optimizing services: A very important capability within an SOA environment is the ability to effectively monitor services and events, which is captured in a Business Activity Monitoring (BAM) solution. BAM provides users with an event aggregation and correlation platform that allows for building a state model defining relationships between various events that impact the operations business KPIs.
Oracle says it has the most comprehensive and mature SOA platform in the market. At first glance, we were impressed to see that its suite addresses all the requirements we mentioned above:
  • Oracle JDeveloper to build services, to service-enable existing assets
  • Oracle ESB for messaging and routing
  • Oracle BPEL Process Manager to wire services together into business flows
  • Oracle Web Services Manager for security and policy management for services
  • Oracle BAM for business-level monitoring and optimization of business services and processes
  • Oracle Application Server 10g R3/ Oracle Fusion Middleware - the J2EE 1.4 runtime on which all this infrastructure may be deployed
In this review, we focused on three components of the Oracle SOA Suite - Oracle BPEL Process Manager (Oracle BPEL PM), Oracle Web Services Manager and Oracle Business Activity Monitoring (Oracle BAM). We give an overview of each of these components, and show each of their capabilities in light of an order-processing scenario - a problem well suited to the application of SOA. We didn't review the full capabilities of Oracle JDeveloper, Oracle Application Development Framework (Oracle ADF), Oracle ESB and the core J2EE-compliant runtime. This is because you can develop apps for the Oracle SOA Suite with third-party tools such as Eclipse; the Suite's components can be deployed to any J2EE application server; and Oracle BPEL Process Manager, Oracle BAM, and Oracle Web Services Manager can integrate with any standards-based messaging solution.

Oracle BPEL Process Manager
Business processes are at the heart of any business. They touch different applications, persons, and business partners during their execution and evolve according to changing business requirements. Some of them are automated with technology solutions. SOA can make a key contribution to enabling easy-to-develop, maintain, and easy-to-adapt business processes.

BPEL makes it easier for organizations to adapt to changing business needs on the fly. Oracle BPEL Process Manager, which is in its fourth release, has been on the market since 2001 (when it was acquired from Collaxa). It includes a BPEL engine, a management console, and a graphical interface for wiring services, as well as robust messaging and routing capabilities. We like that Oracle BPEL Process Manager is engineered to run on top of all major J2EE-compatible application servers. This helps organizations preserve their existing IT infrastructure and in-house resources.

One of the most important features in any BPM tool is the ability to model business processes graphically. Oracle BPEL Process Designer offers a graphical modeling environment for this task, and its drag-and-drop features make it easy to use. It is targeted at the developer and what Oracle calls Functional Developer/ Business Savvy. To create a more full-featured modeling environment for business analysts, Oracle partners with pure-play BPM modeling vendors including IDS Scheer and Proforma.

Oracle BPEL Process Manager provides native support for standards such as BPEL, XML, XSLT, XPATH, JMS, JCA, and Web services, making it a good solution for enabling SOAs.

Processes interact with heterogeneous applications and, in many cases, require human intervention. These applications speak different languages. In order to connect to various systems, Oracle BPEL Process Manager ships with a set of technology and application adapters to let you connect with endpoints that are not exposed as services. These include file, file transfer protocol (FTP), advance queues (AQs), database (DBs), Oracle applications, and other ERP application adapters.

Graphical tooling is also included within JDeveloper for performing data transformations to reconcile different data formats within XML documents being transmitted between services.

Many industry experts are concerned about BPEL's lack of workflow support. Oracle has simply built an application on top of their product that implements workflow capabilities - in theory, workflow built on top of Oracle BPEL Process Manager should be portable across BPEL engines. These built-in, standards-based workflow services are linked to a BPEL process through a WSDL contract. A BPEL process assigns a task to a user or role by making a service call, and waits for a response.

Designing business processes is only one piece of the puzzle. How do you secure these services to prevent unauthorized access? How do you apply security, audit and logging policies to services? First, you need a cohesive security policy infrastructure that governs access to these services. Oracle Web Services Manager, part of Oracle's Identity Management solution, is Oracle's solution.

Oracle Web Services Manager
Security is important for any kind of distributed computing environment. Oracle Web Services Manager, which Oracle obtained last year through its acquisition of Oblix, Inc., lets you define and implement security and operational policies for services. As a developer, you don't want to worry about applying security policies - authentication, encryption and digital signatures. Web Services Manager enables these policies to be enforced from outside the service.

As with Oracle BPEL Process Manager, we like that Oracle Web Services Manager supports multiple Web services platforms and providers including BEA Systems, IBM, Microsoft, Netegrity, TIBCO, and Verisign. It also provides out-of-the-box support for multiple transports such as HTTP, HTTPS, JMS, and IBM Websphere MQ, and multiple messaging models including synchronous and asynchronous messaging.

Oracle Web Services Manager includes two enforcement components that ensure maximum deployment flexibility: policy gateways, which are deployed before a group of applications or services and intercept inbound requests to services, and policy agents, which run in-process with the service that is being secured.

Oracle Web Services Manager policies are a set of operational tasks that are performed when service requests are processed, and the responses between a service client and a service provider at specified policy-enforcement points. Each task is implemented as a policy step that addresses a specific operation (such as authentication, authorization, encryption, decryption, security signature, token or credential verification, transformation, auditing, logging) that's performed on either a Web services request or a response message.

We like the management console, which also monitors each Web services' performance. The graphical dashboard shows overall statistics, including security metrics such as unauthorized access attempts, and service figures including the average service failure rate and average registered service latency. You can drill down into the dashboard by service to see statistics on individual operations. You can also define and monitor individual service levels.

Oracle BPEL Process Manager and Oracle Web Services Manager let you design, orchestrate, and secure services. But how do you gain real-time visibility into business entities and their interactions?

Oracle Business Activity Monitoring
The promise of BAM is to push information to users via visual dashboards and alerts, helping them improve operational effectiveness and make informed decisions. As it relates to SOA, services and events, which provide real-time visibility into business processes, people, and systems need to be monitored. The ability to aggregate service metrics and deliver actionable information on critical business service parameters to business users is also key.

The Oracle BAM architecture uses functions including messaging, data integration, data caching, analytics monitoring, alerting, and reporting to collect, analyze and deliver critical information. We like that these functions support integration with different industry-standard business applications such as JMS, JCA, Web services, file system, MQs (IBM, MS, Sonic), TIBCO, Webmethods, and BEA WebLogic. This means that Oracle BAM can collect real-time information from heterogeneous environments.

In fact, Oracle BAM is generally targeted at business users. However, before they can start creating and viewing reports, someone (the developer/ architect) must create the underlying data model and populate it. Oracle BAM segregates the two tasks. While developers can use Oracle BAM Architect to create the data objects and rules, business users can use Oracle BAM Active Studio's simple interface to create reports. This means that you as the developer just plug-in the data sources - the business users can build their own dashboards.

After reviewing the capabilities of the product suite, we wanted to model a real-world scenario to more completely assess its capabilities. For this, we built a use case that captures a typical order-processing business process.


More Stories By Feroze Mohammed

Feroze Mohammed is the senior vice president, product engineering, custom development and integrations, Sierra Atlantic, Inc. He is also responsible for Sierra Atlantic's own R&D and product development initiatives. Feroze holds an master's degree in computer
applications from the University of Hyderabad.

More Stories By Lawrence Pravin

Lawrence Pravin is the product manager, Process Integration Packs, Sierra Atlantic, Inc. He has over 10 years of experience in packaged applications, and has deep integration expertise with Oracle, PeopleSoft, Siebel and SAP applications. Lawrence holds a computer science and engineering degree from the University of Madras.

Comments (4) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
shaker 12/22/06 03:07:17 PM EST

Very informative and good insights into Oracle's SOA offerings. Good work guys ! May be you should share your own product/offerings visa-vis other vendors?

Baswa Shaker
http://www.shakersphere.com

SOA Web Services Journal News 11/30/06 12:02:56 AM EST

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

JDJ News Desk 05/05/06 04:39:48 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

SYS-CON Italy News Desk 05/05/06 04:08:56 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

@ThingsExpo Stories
SYS-CON Events announced today that CA Technologies has been named "Platinum Sponsor" of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, New York, and 21st International Cloud Expo, which will take place in November in Silicon Valley, California.
SYS-CON Events announced today that delaPlex will exhibit at SYS-CON's @CloudExpo, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. delaPlex pioneered Software Development as a Service (SDaaS), which provides scalable resources to build, test, and deploy software. It’s a fast and more reliable way to develop a new product or expand your in-house team.
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place June 6-8, 2017, at the Javits Center in New York City, New York, is co-located with 20th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry p...
The explosion of new web/cloud/IoT-based applications and the data they generate are transforming our world right before our eyes. In this rush to adopt these new technologies, organizations are often ignoring fundamental questions concerning who owns the data and failing to ask for permission to conduct invasive surveillance of their customers. Organizations that are not transparent about how their systems gather data telemetry without offering shared data ownership risk product rejection, regu...
WebRTC sits at the intersection between VoIP and the Web. As such, it poses some interesting challenges for those developing services on top of it, but also for those who need to test and monitor these services. In his session at WebRTC Summit, Tsahi Levent-Levi, co-founder of testRTC, reviewed the various challenges posed by WebRTC when it comes to testing and monitoring and on ways to overcome them.
Every successful software product evolves from an idea to an enterprise system. Notably, the same way is passed by the product owner's company. In his session at 20th Cloud Expo, Oleg Lola, CEO of MobiDev, will provide a generalized overview of the evolution of a software product, the product owner, the needs that arise at various stages of this process, and the value brought by a software development partner to the product owner as a response to these needs.
The Internet of Things can drive efficiency for airlines and airports. In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect with GE, and Sudip Majumder, senior director of development at Oracle, discussed the technical details of the connected airline baggage and related social media solutions. These IoT applications will enhance travelers' journey experience and drive efficiency for the airlines and the airports.
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
In his session at @ThingsExpo, Sudarshan Krishnamurthi, a Senior Manager, Business Strategy, at Cisco Systems, will discuss how IT and operational technology (OT) work together, as opposed to being in separate siloes as once was traditional. Attendees will learn how to fully leverage the power of IoT in their organization by bringing the two sides together and bridging the communication gap. He will also look at what good leadership must entail in order to accomplish this, and how IT managers ca...
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
SYS-CON Events announced today that CA Technologies has been named “Platinum Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. CA Technologies helps customers succeed in a future where every business – from apparel to energy – is being rewritten by software. From ...
SYS-CON Events announced today that Outlyer, a monitoring service for DevOps and operations teams, has been named “Bronze Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Outlyer is a monitoring service for DevOps and Operations teams running Cloud, SaaS, Microservices and IoT deployments. Designed for today's dynamic environments that need beyond cloud-scale monitoring, we make monitoring effortless so you...
DevOps is being widely accepted (if not fully adopted) as essential in enterprise IT. But as Enterprise DevOps gains maturity, expands scope, and increases velocity, the need for data-driven decisions across teams becomes more acute. DevOps teams in any modern business must wrangle the ‘digital exhaust’ from the delivery toolchain, "pervasive" and "cognitive" computing, APIs and services, mobile devices and applications, the Internet of Things, and now even blockchain. In this power panel at @...
In his session at @ThingsExpo, Steve Wilkes, CTO and founder of Striim, will delve into four enterprise-scale, business-critical case studies where streaming analytics serves as the key to enabling real-time data integration and right-time insights in hybrid cloud, IoT, and fog computing environments. As part of this discussion, he will also present a demo based on its partnership with Fujitsu, highlighting their technologies in a healthcare IoT use-case. The demo showcases the tracking of pati...
A strange thing is happening along the way to the Internet of Things, namely far too many devices to work with and manage. It has become clear that we'll need much higher efficiency user experiences that can allow us to more easily and scalably work with the thousands of devices that will soon be in each of our lives. Enter the conversational interface revolution, combining bots we can literally talk with, gesture to, and even direct with our thoughts, with embedded artificial intelligence, whic...
With 10 simultaneous tracks, keynotes, general sessions and targeted breakout classes, Cloud Expo and @ThingsExpo are two of the most important technology events of the year. Since its launch over eight years ago, Cloud Expo and @ThingsExpo have presented a rock star faculty as well as showcased hundreds of sponsors and exhibitors! In this blog post, I provide 7 tips on how, as part of our world-class faculty, you can deliver one of the most popular sessions at our events. But before reading the...
SYS-CON Events announced today that Cloud Academy will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Cloud Academy is the industry’s most innovative, vendor-neutral cloud technology training platform. Cloud Academy provides continuous learning solutions for individuals and enterprise teams for Amazon Web Services, Microsoft Azure, Google Cloud Platform, and the most popular cloud computing technologies. Ge...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settle...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
TechTarget storage websites are the best online information resource for news, tips and expert advice for the storage, backup and disaster recovery markets. By creating abundant, high-quality editorial content across more than 140 highly targeted technology-specific websites, TechTarget attracts and nurtures communities of technology buyers researching their companies' information technology needs. By understanding these buyers' content consumption behaviors, TechTarget creates the purchase inte...