Click here to close now.

Welcome!

Java Authors: Pat Romanski, Elizabeth White, Carmen Gonzalez, William Schmarzo, Liz McMillan

Related Topics: Oracle, Java, Microservices Journal

Oracle: Article

Oracle SOA Suite

An integrated and standards-based platform

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

Sierra Atlantic has more than a decade of experience implementing application integration solutions. We've worked with a variety of vendors' products and have seen the integration landscape mature over the past six years.

Building an SOA Solution
Building a typical SOA application involves the following activities:

  1. Building services: This may include service-enabling existing business logic using application or technology adapters, or writing new business logic, in J2EE or another language.
  2. Enabling service communication: Services must be able to reliably communicate with each other and with back-end applications. SOA encourages loose coupling. Capabilities such as messaging, data transformation, and message routing, which are often captured in an Enterprise Service Bus, are key.
  3. Wiring services together into business flows: Implementing business processes as orchestrations of services enables easier change. High-level representations of business processes, such as Business Process Execution Language (BPEL), an XML-based language for expressing service orchestration, provides the basis for agile business processes.
  4. Securing services: Within an SOA environment, you must be able to effectively and consistently secure and manage services, and apply different policies (security, auditing, logging) depending on who or what is interacting with a particular service. You should be able to do this without changes to the services.
  5. Optimizing services: A very important capability within an SOA environment is the ability to effectively monitor services and events, which is captured in a Business Activity Monitoring (BAM) solution. BAM provides users with an event aggregation and correlation platform that allows for building a state model defining relationships between various events that impact the operations business KPIs.
Oracle says it has the most comprehensive and mature SOA platform in the market. At first glance, we were impressed to see that its suite addresses all the requirements we mentioned above:
  • Oracle JDeveloper to build services, to service-enable existing assets
  • Oracle ESB for messaging and routing
  • Oracle BPEL Process Manager to wire services together into business flows
  • Oracle Web Services Manager for security and policy management for services
  • Oracle BAM for business-level monitoring and optimization of business services and processes
  • Oracle Application Server 10g R3/ Oracle Fusion Middleware - the J2EE 1.4 runtime on which all this infrastructure may be deployed
In this review, we focused on three components of the Oracle SOA Suite - Oracle BPEL Process Manager (Oracle BPEL PM), Oracle Web Services Manager and Oracle Business Activity Monitoring (Oracle BAM). We give an overview of each of these components, and show each of their capabilities in light of an order-processing scenario - a problem well suited to the application of SOA. We didn't review the full capabilities of Oracle JDeveloper, Oracle Application Development Framework (Oracle ADF), Oracle ESB and the core J2EE-compliant runtime. This is because you can develop apps for the Oracle SOA Suite with third-party tools such as Eclipse; the Suite's components can be deployed to any J2EE application server; and Oracle BPEL Process Manager, Oracle BAM, and Oracle Web Services Manager can integrate with any standards-based messaging solution.

Oracle BPEL Process Manager
Business processes are at the heart of any business. They touch different applications, persons, and business partners during their execution and evolve according to changing business requirements. Some of them are automated with technology solutions. SOA can make a key contribution to enabling easy-to-develop, maintain, and easy-to-adapt business processes.

BPEL makes it easier for organizations to adapt to changing business needs on the fly. Oracle BPEL Process Manager, which is in its fourth release, has been on the market since 2001 (when it was acquired from Collaxa). It includes a BPEL engine, a management console, and a graphical interface for wiring services, as well as robust messaging and routing capabilities. We like that Oracle BPEL Process Manager is engineered to run on top of all major J2EE-compatible application servers. This helps organizations preserve their existing IT infrastructure and in-house resources.

One of the most important features in any BPM tool is the ability to model business processes graphically. Oracle BPEL Process Designer offers a graphical modeling environment for this task, and its drag-and-drop features make it easy to use. It is targeted at the developer and what Oracle calls Functional Developer/ Business Savvy. To create a more full-featured modeling environment for business analysts, Oracle partners with pure-play BPM modeling vendors including IDS Scheer and Proforma.

Oracle BPEL Process Manager provides native support for standards such as BPEL, XML, XSLT, XPATH, JMS, JCA, and Web services, making it a good solution for enabling SOAs.

Processes interact with heterogeneous applications and, in many cases, require human intervention. These applications speak different languages. In order to connect to various systems, Oracle BPEL Process Manager ships with a set of technology and application adapters to let you connect with endpoints that are not exposed as services. These include file, file transfer protocol (FTP), advance queues (AQs), database (DBs), Oracle applications, and other ERP application adapters.

Graphical tooling is also included within JDeveloper for performing data transformations to reconcile different data formats within XML documents being transmitted between services.

Many industry experts are concerned about BPEL's lack of workflow support. Oracle has simply built an application on top of their product that implements workflow capabilities - in theory, workflow built on top of Oracle BPEL Process Manager should be portable across BPEL engines. These built-in, standards-based workflow services are linked to a BPEL process through a WSDL contract. A BPEL process assigns a task to a user or role by making a service call, and waits for a response.

Designing business processes is only one piece of the puzzle. How do you secure these services to prevent unauthorized access? How do you apply security, audit and logging policies to services? First, you need a cohesive security policy infrastructure that governs access to these services. Oracle Web Services Manager, part of Oracle's Identity Management solution, is Oracle's solution.

Oracle Web Services Manager
Security is important for any kind of distributed computing environment. Oracle Web Services Manager, which Oracle obtained last year through its acquisition of Oblix, Inc., lets you define and implement security and operational policies for services. As a developer, you don't want to worry about applying security policies - authentication, encryption and digital signatures. Web Services Manager enables these policies to be enforced from outside the service.

As with Oracle BPEL Process Manager, we like that Oracle Web Services Manager supports multiple Web services platforms and providers including BEA Systems, IBM, Microsoft, Netegrity, TIBCO, and Verisign. It also provides out-of-the-box support for multiple transports such as HTTP, HTTPS, JMS, and IBM Websphere MQ, and multiple messaging models including synchronous and asynchronous messaging.

Oracle Web Services Manager includes two enforcement components that ensure maximum deployment flexibility: policy gateways, which are deployed before a group of applications or services and intercept inbound requests to services, and policy agents, which run in-process with the service that is being secured.

Oracle Web Services Manager policies are a set of operational tasks that are performed when service requests are processed, and the responses between a service client and a service provider at specified policy-enforcement points. Each task is implemented as a policy step that addresses a specific operation (such as authentication, authorization, encryption, decryption, security signature, token or credential verification, transformation, auditing, logging) that's performed on either a Web services request or a response message.

We like the management console, which also monitors each Web services' performance. The graphical dashboard shows overall statistics, including security metrics such as unauthorized access attempts, and service figures including the average service failure rate and average registered service latency. You can drill down into the dashboard by service to see statistics on individual operations. You can also define and monitor individual service levels.

Oracle BPEL Process Manager and Oracle Web Services Manager let you design, orchestrate, and secure services. But how do you gain real-time visibility into business entities and their interactions?

Oracle Business Activity Monitoring
The promise of BAM is to push information to users via visual dashboards and alerts, helping them improve operational effectiveness and make informed decisions. As it relates to SOA, services and events, which provide real-time visibility into business processes, people, and systems need to be monitored. The ability to aggregate service metrics and deliver actionable information on critical business service parameters to business users is also key.

The Oracle BAM architecture uses functions including messaging, data integration, data caching, analytics monitoring, alerting, and reporting to collect, analyze and deliver critical information. We like that these functions support integration with different industry-standard business applications such as JMS, JCA, Web services, file system, MQs (IBM, MS, Sonic), TIBCO, Webmethods, and BEA WebLogic. This means that Oracle BAM can collect real-time information from heterogeneous environments.

In fact, Oracle BAM is generally targeted at business users. However, before they can start creating and viewing reports, someone (the developer/ architect) must create the underlying data model and populate it. Oracle BAM segregates the two tasks. While developers can use Oracle BAM Architect to create the data objects and rules, business users can use Oracle BAM Active Studio's simple interface to create reports. This means that you as the developer just plug-in the data sources - the business users can build their own dashboards.

After reviewing the capabilities of the product suite, we wanted to model a real-world scenario to more completely assess its capabilities. For this, we built a use case that captures a typical order-processing business process.


More Stories By Feroze Mohammed

Feroze Mohammed is the senior vice president, product engineering, custom development and integrations, Sierra Atlantic, Inc. He is also responsible for Sierra Atlantic's own R&D and product development initiatives. Feroze holds an master's degree in computer
applications from the University of Hyderabad.

More Stories By Lawrence Pravin

Lawrence Pravin is the product manager, Process Integration Packs, Sierra Atlantic, Inc. He has over 10 years of experience in packaged applications, and has deep integration expertise with Oracle, PeopleSoft, Siebel and SAP applications. Lawrence holds a computer science and engineering degree from the University of Madras.

Comments (4) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
shaker 12/22/06 03:07:17 PM EST

Very informative and good insights into Oracle's SOA offerings. Good work guys ! May be you should share your own product/offerings visa-vis other vendors?

Baswa Shaker
http://www.shakersphere.com

SOA Web Services Journal News 11/30/06 12:02:56 AM EST

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

JDJ News Desk 05/05/06 04:39:48 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

SYS-CON Italy News Desk 05/05/06 04:08:56 PM EDT

Service-oriented architecture is an architectural approach to building software applications as a collection of reusable business services. Interest in SOA is growing within the business community. To address the need for an infrastructure to enable the building of service-oriented applications, a new breed of SOA suites is emerging. Vendors such as Oracle, BEA Systems, and IBM now provide platforms specifically focused on SOA applications. In established, complex IT environments with diverse applications - including legacy applications that are tied together with custom adapters, and business scenarios that demand extensive partner interaction - the move to SOA may appear challenging. However, new SOA suites make it easy. We at Sierra Atlantic decided to review one of them - Oracle SOA Suite.

@ThingsExpo Stories
The Internet of Things will greatly expand the opportunities for data collection and new business models driven off of that data. In her session at @ThingsExpo, Esmeralda Swartz, CMO of MetraTech, discussed how for this to be effective you not only need to have infrastructure and operational models capable of utilizing this new phenomenon, but increasingly service providers will need to convince a skeptical public to participate. Get ready to show them the money!
SYS-CON Events announced today that MetraTech, now part of Ericsson, has been named “Silver Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9–11, 2015, at the Javits Center in New York, NY. Ericsson is the driving force behind the Networked Society- a world leader in communications infrastructure, software and services. Some 40% of the world’s mobile traffic runs through networks Ericsson has supplied, serving more than 2.5 billion subscribers.
The 17th International Cloud Expo has announced that its Call for Papers is open. 17th International Cloud Expo, to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, brings together Cloud Computing, APM, APIs, Microservices, Security, Big Data, Internet of Things, DevOps and WebRTC to one location. With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding business opportunity. Submit your speaking proposal today!
17th Cloud Expo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy. Meanwhile, 94% of enterprises are using some form of XaaS – software, platform, and infrastructure as a service.
The Internet of Things is not new. Historically, smart businesses have used its basic concept of leveraging data to drive better decision making and have capitalized on those insights to realize additional revenue opportunities. So, what has changed to make the Internet of Things one of the hottest topics in tech? In his session at @ThingsExpo, Chris Gray, Director, Embedded and Internet of Things, discussed the underlying factors that are driving the economics of intelligent systems. Discover how hardware commoditization, the ubiquitous nature of connectivity, and the emergence of Big Data a...
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo in Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The Internet of Things (IoT) is the most profound change in personal an...
All major researchers estimate there will be tens of billions devices - computers, smartphones, tablets, and sensors - connected to the Internet by 2020. This number will continue to grow at a rapid pace for the next several decades. With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo, June 9-11, 2015, at the Javits Center in New York City. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be
Container frameworks, such as Docker, provide a variety of benefits, including density of deployment across infrastructure, convenience for application developers to push updates with low operational hand-holding, and a fairly well-defined deployment workflow that can be orchestrated. Container frameworks also enable a DevOps approach to application development by cleanly separating concerns between operations and development teams. But running multi-container, multi-server apps with containers is very hard. You have to learn five new and different technologies and best practices (libswarm, sy...
SYS-CON Events announced today that DragonGlass, an enterprise search platform, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. After eleven years of designing and building custom applications, OpenCrowd has launched DragonGlass, a cloud-based platform that enables the development of search-based applications. These are a new breed of applications that utilize a search index as their backbone for data retrieval. They can easily adapt to new data sets and provide access to both structured and unstruc...
As the Internet of Things unfolds, mobile and wearable devices are blurring the line between physical and digital, integrating ever more closely with our interests, our routines, our daily lives. Contextual computing and smart, sensor-equipped spaces bring the potential to walk through a world that recognizes us and responds accordingly. We become continuous transmitters and receivers of data. In his session at @ThingsExpo, Andrew Bolwell, Director of Innovation for HP's Printing and Personal Systems Group, discussed how key attributes of mobile technology – touch input, sensors, social, and ...
WebRTC defines no default signaling protocol, causing fragmentation between WebRTC silos. SIP and XMPP provide possibilities, but come with considerable complexity and are not designed for use in a web environment. In his session at @ThingsExpo, Matthew Hodgson, technical co-founder of the Matrix.org, discussed how Matrix is a new non-profit Open Source Project that defines both a new HTTP-based standard for VoIP & IM signaling and provides reference implementations.
SYS-CON Events announced today that the "First Containers & Microservices Conference" will take place June 9-11, 2015, at the Javits Center in New York City. The “Second Containers & Microservices Conference” will take place November 3-5, 2015, at Santa Clara Convention Center, Santa Clara, CA. Containers and microservices have become topics of intense interest throughout the cloud developer and enterprise IT communities.
Buzzword alert: Microservices and IoT at a DevOps conference? What could possibly go wrong? In this Power Panel at DevOps Summit, moderated by Jason Bloomberg, the leading expert on architecting agility for the enterprise and president of Intellyx, panelists will peel away the buzz and discuss the important architectural principles behind implementing IoT solutions for the enterprise. As remote IoT devices and sensors become increasingly intelligent, they become part of our distributed cloud environment, and we must architect and code accordingly. At the very least, you'll have no problem fil...
Almost everyone sees the potential of Internet of Things but how can businesses truly unlock that potential. The key will be in the ability to discover business insight in the midst of an ocean of Big Data generated from billions of embedded devices via Systems of Discover. Businesses will also need to ensure that they can sustain that insight by leveraging the cloud for global reach, scale and elasticity.
The 4th International Internet of @ThingsExpo, co-located with the 17th International Cloud Expo - to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA - announces that its Call for Papers is open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
"People are a lot more knowledgeable about APIs now. There are two types of people who work with APIs - IT people who want to use APIs for something internal and the product managers who want to do something outside APIs for people to connect to them," explained Roberto Medrano, Executive Vice President at SOA Software, in this SYS-CON.tv interview at Cloud Expo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect at GE, and Ibrahim Gokcen, who leads GE's advanced IoT analytics, focused on the Internet of Things / Industrial Internet and how to make it operational for business end-users. Learn about the challenges posed by machine and sensor data and how to marry it with enterprise data. They also discussed the tips and tricks to provide the Industrial Internet as an end-user consumable service using Big Data Analytics and Industrial Cloud.
Sensor-enabled things are becoming more commonplace, precursors to a larger and more complex framework that most consider the ultimate promise of the IoT: things connecting, interacting, sharing, storing, and over time perhaps learning and predicting based on habits, behaviors, location, preferences, purchases and more. In his session at @ThingsExpo, Tom Wesselman, Director of Communications Ecosystem Architecture at Plantronics, will examine the still nascent IoT as it is coalescing, including what it is today, what it might ultimately be, the role of wearable tech, and technology gaps stil...
The explosion of connected devices / sensors is creating an ever-expanding set of new and valuable data. In parallel the emerging capability of Big Data technologies to store, access, analyze, and react to this data is producing changes in business models under the umbrella of the Internet of Things (IoT). In particular within the Insurance industry, IoT appears positioned to enable deep changes by altering relationships between insurers, distributors, and the insured. In his session at @ThingsExpo, Michael Sick, a Senior Manager and Big Data Architect within Ernst and Young's Financial Servi...
The Workspace-as-a-Service (WaaS) market will grow to $6.4B by 2018. In his session at 16th Cloud Expo, Seth Bostock, CEO of IndependenceIT, will begin by walking the audience through the evolution of Workspace as-a-Service, where it is now vs. where it going. To look beyond the desktop we must understand exactly what WaaS is, who the users are, and where it is going in the future. IT departments, ISVs and service providers must look to workflow and automation capabilities to adapt to growing demand and the rapidly changing workspace model.