SOA Best Practices - SOA Governance Summit

Bring Structure, Scale And Speed To Your SOA Adoption

SOA Best Practices | Anchorage, AK| April 21, 2009

Welcome!

Jim BoleVice President, SOA SolutionsSoftware AG

Agenda Topics

Page 2

9:00 – 10:15 SOA Best Practices Jim Bole- Is SOA Dead?- Target State – The Agile Enterprise- Agility & Business/IT Alignment – Service Domains- Architectural Implications

- Infrastructure Requirements- Usage Patterns- Federation Models

- Best Practice Take-aways

10:15 – 10:30 Break

10:30 – 12:00 The End Game – PA JNET Frank Caloiaro- Justice-based standards for information exchange- NIEM/JXDM- Security for Justice Networks- Policy-based governance – designtime/runtime/changetime

Page 3

SOA Has Crossed the Chasm

20020099

“SOA War Stories Highlight Need for Disciplined Approach”

“When SOA Breaks, What Then?”“Quality Assurance Practices Will Drive the Reuse of SOA Services”“Applied SOA: Transforming Fundamental Principles into Best Practices”

“Key Issues for SOA Governance”

“Agile Processes Enable SOA Success”

20020022

“SOA: A ‘Must Have’”

“SOA is Changing Software”

“Simply Your Business Processes with an SOA Approach”

“SOA Comes of Age via Web Services”

Page 4

SOA has Crossed the Chasm

Which statement best describes the state of your SOA implementation?

We have no plans to adopt SOA at this time

We have begun planning for our deployment

We have successfully implemented SOA-based projects or use SOA principles in our work

We have implemented an enterprise SOA

Page 5

Why Now: SOA Infrastructure is “Ready for Prime Time”

Service enablement is mature and prolific¬ Sources include SAAS, pre-packaged software, enablement

tools¬ You are “service-enabled”, you just may not know it…..

Security has been vetted and leverages existing modelsIntermediary patterns well-supported by a variety of

solutions¬ Enterprise Service Bus offerings¬ Service Management products¬ XML Appliances

Registry/Repository offerings are enterprise-classGovernance comes to the forefront….

Page 6

Top Drivers for SOA

Support BPMInitiatives

SimplifyIntegration

Improve Business AgilityAnd Adaptability

SOA Governance Summit | Page 7

Governance is Recognized as a Key Enabler

How important is governance to SOA strategy?

Critical

Moderate

Minimal



Software AG’s SOA Vision:

Enabling the 21st Century Agile

Enterprise

BPM + SOA Basics Seminar | Page 9

21st Century Composition-Driven IT Lifecycle

BusinessBusinessRequiremenRequiremen

tstsOrder

Requirement 2

Process Process RequirementRequirement

ss

Business

Rules

Library of re-usable services, data,Library of re-usable services, data,processes, rules, docs,…processes, rules, docs,…

Business Assets Metadata

Order

Requirement 1

Business VisionBusiness Vision

Requirement 3

New Services New Services Development Development

FactoryFactory


Your Organization Probably Looks a Little Like This…

Packaged Applications

Custom Applications

LegacyApplications

ExternalUsers

InternalApplications

Partners& Suppliers

SMTP EDI RPC SOCKETS XXX YYY

Flat Files Message Queue SOAP XML FTP POX


Why is Enterprise IT such a mess?


Enterprise IT is an Evolved System…

Evolution:

Variation¬ Try Things at Random…

Fitness¬ Compete for Selection…

Conservation¬ Throw Nothing Away…


How did we get here?

Project Based Funding

ROI Measured Per-Project

No incentive to Share

Silos: Good for me bad for you thinking…


The cure?


From this… … to this

JBOWS Composition

The Cure…

Is SOA just LEGOland for IT people?


The Real Power of SOA


0% 10% 20% 30% 40% 50% 60% 70% 80%

More rapid and flexible IT response tochanging business needs

Enhanced ability for IT to drive and/orsupport business innovation

Cost savings from more efficient delivery ofIT

Protection of past and future IT investmentsby delaying obsolescence

Improved operational service levels to thebusiness

Experienced adoptersAll respondents

Which of the following would you regard as significant business level drivers for investing in SOA?

Source: Freeform Dynamics/MWD Survey, May/Jun 2006 (Sample 1332)



From this… … to this

JBOWS Composition

Is this the complete story of SOA?

This story only reduces the cost and complexity of IT


Legacy Integration

Customer Data

Customer Interaction

Order History

Order Policy Shipment

Business Services

Customer

InformationOrder

ManagementOrder

Compensation

CRM ERPCustomer Data Orders Logistics

Composite Apps

Business Processes

RetrieveData

VerifyDetails

OrderEntry

OrderReview

ApproveOrder

InitiateShipment

Order Management

The SOA-Enabled Enterprise

21

ACH

Deposits

Checking Savings

MoneyMkt.

CDs

Account Mgmt

Transactions

???

Branch Phone Internet ATM Rel’ship Mgrs

Bank Brand 1 Bank Brand 2 Other Brands

CustomerView Transfer Fraud Risk CRM

Channels

Brands

Cross-ProductServices

ProductDomains

BusinessServices

Products

EFT

Consumer Lending

Account Mgmt

Origination

Servicing

Mortgage

Personal

Auto HELOC

CreditCard

CreditLine

Commercial Lending

Account Mgmt

Origination

Servicing

CapitalLease

CreditLine

CreditCard

??

WealthManagement

Account Mgmt

Transactions

Servicing

Mortgage

Insurance

EstateProperty

Mgmt.

Custody/Escrow

Trust

Securities& Brokerage

Account Mgmt

Transactions

Custody

Brokerage

Trusts

MarginMutualFunds

IRAs401-k

SharedSharedServices

EnterprisePlatforms

TechnicalServices

IMPACS FinesseBranchTeller

Weiland ACBS MPLS TransfundTrustOmni

FRM Salesforce FED

Imaging ContentMgmt

ValidationCreditCheck

GL

HRIS

HumanResources

Finance

Pricing


Business Infrastructure for SOA


The SOA Tipping Point: Key Success Indicators

Target State Defined

Infrastructure Funding

ROA and TCO Measured Lifetime

Value Visibility

Continuous Process Improvement

Innovation without the hangover

Page 24

SOA Adoption Challenges

HeterogeneitySecurityInteroperability HoardingLack of TrustExternally Imposed RulesLoss of ControlAssigning Blame“Ownership”Distribution of BurdenDistribution of Incentives

Page 25

SOA Strategy Engagement

Key Elements

Maturity Assessment SOA Success Factors – KPIs and Gates Roadmapping and Adoption Planning Governance Models Organizational Impact and the SOA-CC Best Practices and Recommendations

“Pragmatic Next Steps with measurable adoption milestones”

Core SOA Patterns

•Consumer Patterns¬ Service Discovery Pattern¬ The Service Consumption Pattern

•Provider Patterns¬ Service Registration Pattern¬ The Service Provider Pattern

•Governance Patterns¬ The Management (run time) Pattern¬ The Validation (design time) Pattern

Consumer Pattern: Service Discovery

ServiceConsumer


ServiceConsumer

Registry

LookupRequest


ServiceProvider

ServiceConsumer

ServiceRegistry

Discovery

Consumer Pattern: Consumption

ServiceProvider

ServiceConsumingApplication Service

Request

Consumer Pattern: Consumption

ServiceProvider


Request

ServiceResponse

Provider Pattern: Service Registration

ServiceProvider

ServiceRegistry

RegistrationRequest

Provider Pattern: Composite Application

“CompositeService”


Request

ServiceResponse

Service A

Service B

Composition can be synchronous or asynchronous

Governance Pattern: Management (Run Time)

ServiceProvider


Request

ServiceResponse Broker

XML Messages enable “in flight” machine processing

Governance Pattern: Validation (Design Time)

ServiceProvider

RegistryRepository

RegistrationRequest

XML Declarations enable “registration time” machine validation

Validation

Process Implications – Service Lifecycle != SDLC

Service Provisioning

Publish

Discover Request

Version

Service Implementation

Service Consumption

ExecuteDeploy

Solution Implementation

DesignCertify

Analysis

Lifecycle Governance Pattern

“CompositeService”


Request

ServiceResponse

Service A

Service B

Lifecycle Governance encompasses Design Time Validation, Run Time Management and Change Time

Broker

GovernanceRegistry

Console

Design Time Run Time Change Time

Developer Business UserArchitect ServiceConsumer

IT Operations Admin

CentraSite™ Covers End-to-End Lifecycle Governance

CentraSite™ enables Collaboration and Trust between Stakeholders

SOA System of Record

SOA Federation Patterns – Sharing Scopes

Policy

Registry Promotion

Development Testing Production

Policy

Registry Replication

Policy

Pol

icy

Polic

y

Registry Aggregation

Pol

icy

Pol

icy

Registry Syndication

40

Best Practice Recommendations – The Soft Issues

¬Governance from Day 1. Align with existing processes and ensure quality of service content.

¬Establish service management roles beyond “author”. Formalize these new roles. Multiple roles per person is typical.

¬Services as “Products”. Instill a product management approach and culture.

¬Leverage existing processes to the hilt vs. creating new processes if possible.

¬Don’t over-govern. Start with advisory policies and tighten later.

¬Visible executive sponsorship is essential to the success of an SOA initiative. This is more than a technology project.

¬Solicit cross-functional participation when appropriate. ¬Revisit Funding and Incentive models.

41

Target State – Best Practice Recommendations - Design-time

¬Use of canonicals is becoming a strong indicator of SOA success. Should be introduced incrementally, but business service contracts should ideally utilize them from the start.

¬Augment current EA review procedures with service aspects.¬Design your governance model up-front, even before tooling exists.

Ensure that service definitions are complete and high quality metadata exists.

¬Create templates for Service Design Specifications. These should focus on sound interface/contract design, not implementation.

¬Define standards for namespaces and service naming. Make sure to allow “room” in namespaces for hierarchical extensions. Don’t use organization names in names/namespaces – they will change at the worst time.

¬Start with approval-based governance initially – augmenting design reviews. Learn from this an automate later.

42

Target State – Best Practice Recommendations - Runtime

¬Establish mediation as part of the architecture asap. Not doing so will require substantial headaches and rework later.

¬Design a security model that is policy-driven and enforced. Eliminate authentication in the provider service and migrate to mediator when available.

¬Establish SDM-wide SLAs, monitoring best practices. ¬Implement contracts to allow preferencing of

consumer/provider relationships.¬Consider use of XML appliances for later phases and Inter-

department SOA.

43

Target State – Best Practice Recommendations - Changetime

¬Tackle consumer onboarding process now, implement manually until registry/repository is available. This will ensure you know what apps are consuming what services.

¬Create templates for Service Requests and Service Access Requests. Maintain these artifacts along with the registry/repository.

¬Establish service provision process/policies in conjunction with CCB activities today.

¬Defer version management and offboarding processes to later phases.



The End Game

Full Justice Integration – PA JNET

Frank Caloiaro - DTC

Documents

SOA Best Practices - SOA Governance Summit