This document summarizes new features in recent versions of IBM API Management. Key points include: - Version 3.0.1 focused on scripted deployment, non-disruptive publishing, API cloning, and other improvements. - Version 3.0.4 added features like Swagger import, authentication URL configuration, and analytics enhancements. - Version 4 will include Swagger-based API creation, co-publishing capabilities, environment-based approval workflows, and other lifecycle and governance improvements. It will also offer more discovery and security features.

1. © 2015 IBM Corporation
2382
What’s New in
IBM API Management
Sid Bhatia – Product Management
Chris Markes – Product Design &
Engineering

2. API Economy Value Chain

3. Securely expose your business to an internal/external developer ecosystem
Provide self-service API
portals to internal/external
app developers
Expose business services
securely as APIs to select
developer communities &
analyze API usage
Manage & monitor the
entire API platform
On-premise
private
Off-premise
SaaS
Off-premise
dedicated
Hybrid
IBM API Management

4. Easily manage your APIs, in your private environment
design, secure, control, publish, monitor & manage
Explore API documentation
Provision application keys
Self-service experience
Developer Portal API Manager Management Console
Define and manage APIs
Explore API usage with analytics
Manage API user communities
Provision system resources
Monitor runtime health
Scale the environment
API Gateway
(IBM DataPower)
Enforce runtime policies to control API traffic

5. © 2014 IBM Corporation
API Management solution, on-premise
Product APIs allow customers
to interact with the API
Management solution, and
extend/customize
Product APIs Management layer Gateway layer
The management layer embodies
the capability for organizations to
define, manage, expose and
control APIs. Provides API
Manager, Developer Portal and
Management Console.
(Virtual Appliance running
VMWare ESXi 5.0, vCenter V5.5,
Citrix XenServer 6.2, IBM
PureApplication System W1500 1.1)
API configurations are deployed
to the gateway, which provides
the enforcement point for
runtime policies to control API
traffic
(DataPower physical appliance or
virtual appliance VMWare ESXi
5.0, vCenter V5.5, Citrix XenServer
6.2, IBM PureApplication System
W1500 1.1)

6. What’s delivered since
last year & what’s new

7. 2.0
IBM API Management product updates
•Multi-tenant
on-premise
solution to
define,
assemble,
publish,
monitor REST
APIs
•Developer
portal to
easily
consume APIs
•DataPower
as the API
gateway
•SOAP support
•Manage various
dev
communities
•Simplified
deployment &
packaging
•Service
discovery from
WSRR
•Xen & PureApp
support
•Developer
portal
customization
•Multiple
Gateway cluster
support
2013 2014
3.0
•Interactive API
test on portal
•Developer
notifications on
rate limits
•APIs to
customize portal,
user mgmt
•Service
discovery from
custom registries
•Free 30-day SaaS
trial
•Buy SaaS with
credit card
•Monthly billing
•Self-service or
sales-assisted
3.0.2 3.0.3
•Viewer only
app developer
role
•Developer
onboarding by
invitation only
•Enhanced
privacy
•Application
suspension
•Support for
3rd party
authentication
providers
•Encryption of
Plans
Oct Nov
•Topology
flexibility
with mgmt
& data
traffic
separation
•Multi-
gateway
cluster
support on
single
gateway
appliance
•API usage
statistics at
a glance
3.0.1 Sep
•Scripted deploy
•Non-disruptive
publish
•API cloning
•SSL Mutual
Auth for UI
consoles
•Custom Roles
•REST API
discovery
•Assembly
debug
•Multi-site
•Custom portal
w/CMS
-Ready! API plug-in
-Tech preview:
Swagger import
3.0.4
Dec

8. IBM API Management v.3.0.1*
API Development
• OAuth2 Refresh/Revocation: API Developer can enable OAuth2 token refresh and/or revocation
• API Properties: API Developer can create custom properties enabling seamless transition between
environments (e.g. environmentally dependent service endpoints)
• Pluggable SOAP Discovery: API Provider can develop a discovery agent to enable SOAP
discovery from custom registries for exposure as REST/SOAP APIs
• Cross Origin Resource Sharing (CORS): CORS support enabling easy cross site API requests
Developer Portal enhancements
• Live Docs: App Developer can invoke/test an API within the documentation to accelerate their API
comprehension
• Rate Limit Notifications: App Developer can receive notification when near or exceeding their
subscribed rate limit to make informed and timely adjustments
• WSDL Download: App Developer can download the WSDL for a SOAP API to be used for testing
and client development
• Catalog APIs: Script application creation or develop a custom Developer Portal
Analytics & Reporting
• 90 Day Visualization: API Provider UI dashboards can display up to 90 days for instant analysis
• Fine Grained Export: API Provider can export fine grained analytics via API Manager for integration
with 3rd party business intelligence systems, monetization and billing, or reporting
SaaS Offering
• Try & Buy: Self service signup for 30 day free trial, Pay with credit card or contact Sales
• Usage based pricing: API volume and application developer based + optional detailed usage
logging
* released Sep 26, 2014 for on-premise & applied to SaaS
Details at www-01.ibm.com/support/docview.wss?uid=swg21685516

9. IBM API Management v3.0.2*
Developer Engagement
• By invitation only: Enable app developer onboarding by invitation
only
• Viewer Role: Enable a view-only app developer role
• Client ID / secret confidentiality: Enhanced privacy in the
Developer Portal to get client secret; Deferred retrieval of client
secret
Provider Productivity
• Authentication URL: API Provider can configure non-LDAP based
IDPs by using Authentication URL. For example, enabling
integration with third-party authentication providers.
• Application suspension: Individual apps can be suspended by the
API Provider. Block the app from invoking APIs and prevent blocked
apps from registering with Plans
• Encrypted Plan: API Provider can export/import Plans as an
encrypted package for secure handling between disconnected
environments.
* released Oct 20, 2014 for on-premise & applied to Saa
Details at www-01.ibm.com/support/docview.wss?uid=swg21687434

10. IBM API Management v3.0.3*
Topology Flexibility
• Dual NICs on Management Server: Enhanced networking/topology
flexibility on the management appliance to separate management &
data traffic.
• Multiple gateway clusters per DataPower appliance: Scale with
ease for increased gateway utilization through multiple clusters
within a single DataPower appliance
Analytics & Reporting
• Usage summary statistics: Aggregated quick view usage statistics
of number of API calls across environments, number of developer
account & storage against payload logging
* released Nov 21, 2014 for on-premise
Details at: www-01.ibm.com/support/docview.wss?uid=swg21690570

11. IBM API Management v3.0.4*
API Lifecycle & Governance
• Scripted Deployment: Deploy Plans from outside API Manager using a script for operational
integration. Support for deploy, undeploy, publish, unpublish, suspend, resume
• Non-disruptive Publish: Deploy changes to rate limits, minor API revisions in a plan without any
outage while also providing auto subscriber migration
• API Cloning: Create a new copy of an API with a single click to accelerate API development
Security
• Secure UI access: SSL Mutual Authentication support for secure UI traffic to Cloud Management
Console , API Manager UI and Developer portal
• Custom Roles: Create unique roles across the API provider organization, each with view/modify
access to Plans, APIs, environments, etc.
API Provider Productivity
• API Discovery: Easily find & expose REST services, by discovering them from custom registries
such as those on z/OS. This is in addition to already available SOAP service discovery from custom
registries
• Assembly Debugging: Debug API assembly flow with ease from within the API Manager UI
Topology Flexibility
• High performance multi-site configuration: Optimize and load balance communications between
gateway servers and management servers in a multi-site configuration
Tech Preview
• Swagger Import: Accelerate API development & reuse existing API definitions through import of
Swagger 2.0 representation
* released Dec 22, 2014 for on-premiseDetails at: www-01.ibm.com/support/docview.wss?uid=swg21693132

12. API Providers & Consumers:
Test API readiness with Ready! API plugin
Export:
Define new APIs in
Ready! API product by
uploading Swagger,
WADL, RAML, WSDL,
etc., and then test the
API.
 Commit to a full
range of tests –
functional, load,
security
 When ready, click a
button to
Export API to insert
the tested API into
API Manager UI
Import:
Use Ready! API
testing platform to
Import SOAP &
REST API definitions
directly from IBM API
Mgmt Dev portal for
unit/functional testing,
load testing, service
virtualization & more
 Select any API from
Dev Portal
 Auto-generate test
suite
 Validate functionality
and resiliency
 Virtualize for
application testing &
API Consumers API Providers

13. Custom API Portal using IBM API Mgmt & Drupal CMS

14. What’s new

15. IBM Interconnect 201514
Securely expose business services to
internal & external developer communities
• Easily assemble business APIs into a single
catalog & publish to custom social portals
• Manage APIs using IBM API Management in
Bluemix & share APIs with Bluemix developers
• Accelerate API creation, deployment &
invocation with Swagger 2.0 support
• Extract API usage & analytics data via API
• Leverage API Management Service delivered in
Softlayer with built-in failover, redundancy &
dynamic scaling
• Move APIs & Plans from public cloud to
private/on-premise for complete flexibility
IBM API Management v4
On-premise SaaS Bluemix
GA: Mar 20, 2015

16. IBM Interconnect 201515
15
IBM API Management v4*
Lifecycle & Governance
• Swagger based API creation: Allows APIs to be imported from Swagger, deployed, and
invoked without any manual configuration steps to the API
• Co-Publish: Co-publish and supersede plans as well as manage plan subscription migrations
• Promotion Approval: Environment based configuration for approving plan lifecycle changes
• Plan Auto-creation & Wildcarding: Auto create plan when API is created with a reference
to all resources that are added to the API
• Enforced: Option to just publish APIs and not gateway enforce them
• Policy for SOAP: Ability to add/modify policies for SOAP Services
• Discover: Manage REST & SOAP services from System z and custom registries
Security
• Mutual Authentication: Out of the box support for custom certificates for backend
endpoints, LDAP, and SMTP servers
Assembly
• Error Handling: Ability to map errors returned from a Service call into a Response
Developer Portal (Drupal)
• Multi-factor authentication: Enabled in the Drupal based developer portal
• Search: Out of the box support for search and developer management
• Categorization: Flexible Plan/API multi-level classification
• CAPTCHA : Support to prevent automated programs from accessing the portal to enroll users
• Password Lockout
* GA: Mar 20, 2015

17. API lifecycle
management

18. New view for managing
API and plan lifecycle

19. Filter by lifecycle state

20. New actions for managing
API and plan lifecycle

21. Manage plan visibility
and subscribability

22. Manage application subscriptions
across plans

23. Migrate subscriptions between plans

24. Optional approval steps for
publishing and lifecycle actions

25. 'Macro actions' for key tasks

26. Manage transition from one
version to another

27. Managed deprecation and
retirement of plans at end of life

28. Developer portal

29. All-new developer portal, based on
Drupal content management system

30. Self-service
developer registration

31. Getting started

32. Browsing APIs

33. API detail

34. App registration and
subscription detail

35. Built-in collaboraton features

36. API configuration

38. Cloud

39. API Management comes to Bluemix

40. IBM API Management Service (SaaS)
Embrace the API Economy in the Cloud
• Design & Secure APIs, Publish to developer
portals, Analyze API usage & performance
• A resilient and highly available API runtime
infrastructure with built-in failover, redundancy &
dynamic scaling on IBM SoftLayer
• Seamlessly move APIs & Plans from public to
private cloud or on-prem for complete flexibility
• 30-day full feature trial, self-service pay with credit
card
• Grow as you need: Pricing based on API calls &
developer accounts with optional logging of API
payload
• Identical capabilities of on-premise
• Manage your APIs in Bluemix
• Share APIs with Bluemix developers
ibm.biz/apimsaas
Global Network
London
FrankfurtTokyo
Singapore
San Jose
Houston

41. Enabling businesses to join the API Economy
IBM API Management - on-cloud & on-premise
Engage with app developers through portals
• API exploration
• Self-service sign up
• Interactive API testing
• App & Key management
• API usage analytics
• Rate limit notification
• Multiple dev communities
• Build custom portal with blogs,
forums
• Define & Secure REST & SOAP APIs, Publish to multiple
developer portals & users, Analyze API usage &
performance
• A resilient integrated API runtime gateway infrastructure
with IBM DataPower Gateway for enforcement of
runtime policies to secure & control API traffic
• Seamlessly move APIs & Plans from public to private
cloud or on-prem for complete flexibility
Define, publish & manage APIs
• OAuth security management
• Backend service discovery
• API lifecycle management
• API subscription management
• Data transformation/redaction
• Rate limiting at Plan/Resource level
• API user & Plan management
• API deployment to Gateway
• API security enforcement
• API Analytics to gain business
insight
• Custom roles & role-based access
control
Manage API environment
• Administer & scale system
resources
• Monitor runtime health
• Multi-tenancy
REST APIs to extend/customize
• Developer Portal
• User onboarding
• Integration with API testing
tools (SoapUI NG Pro,
Ready! API)
• Integration with Content
Management System
(Drupal)

42. Subscription and Support
A comprehensive product upgrade and Technical Support Solution that
helps you take advantage of all the new releases with a 24*7 technical
support.
IBM Software Subscription & Support
Excited about the new features?
Meet our Subscription and Support experts at Essential Services
Zone, Palm Foyer, Level 3, Mandalay Bay to learn how to get
your hands on these features.

43. API Management Sessions at InterConnect 2015
Client Use Case sessions
• 3282: Enterprise API Strategies: API Economy Customer Panel with Citi, Kaiser Permanente, Humana,
DealerTrack & Toyota
• Mon, 23-Feb 02:00 PM - 03:00 PM- Mandalay Bay Lagoon F
• 3480: Exposing WestJet Services Using IBM API Management
• Mon, 23-Feb 02:00 PM - 03:00 PM- Mandalay Bay Surf Ballroom B
• 3322: How Pitney Bowes Helps You Ship Accurately with APIs
• Mon, 23-Feb 11:00 AM - 12:00 PM- Mandalay Bay Reef Ballroom D
• 5414: Governance and API Management Success Story at Blue Cross Blue Shield of Minnesota
• Mon, 23-Feb 12:15 PM - 01:15 PM- Mandalay Bay Surf Ballroom B
• 3028: API Management Challenges, Wins, Business Outcomes and Ongoing Strategy at Westpac New Zealand
• Wed, 25-Feb 12:30 PM - 01:30 PM- Mandalay Bay Surf Ballroom B
• 3186: Exploring New Frontiers in M2M Services through API Marketplaces
• Wed, 25-Feb 02:00 PM - 03:00 PM- Mandalay Bay Lagoon F
• 3315: How Informatique des Banques Populaires is Driving Banking Innovation and Extending SOA Using APIs
• Wed, 25-Feb 02:00 PM - 03:00 PM- Mandalay Bay Surf Ballroom B
• 3316: Dogfooding: How IBM's CIO Team is Managing IBM APIs Using IBM API Management
• Wed, 25-Feb 08:00 AM - 09:00 AM- Mandalay Bay Lagoon F
© 2015 IBM Corporation
2

44. API Management Sessions at InterConnect 2015
3
API Economy
• 3286: Ten Reasons Developers Hate Your API (and What to Do About It) –
by John Musser, CEO of API Science & Founder of ProgrammableWeb.com
• Tue, 24-Feb 11:00 AM - 12:00 PM- Mandalay Bay Lagoon F
• 3288: Scale the API Economy with the Open API Definition Leap of Faith –
by Mehdi Medjaoui, APIDays.io & OAuth.io
• Tue, 24-Feb 2:00 PM - 3:00 PM- Mandalay Bay Surf Ballroom B
• 2246: From APIs to API Economy
• Tue, 24-Feb 03:30 PM - 04:30 PM- Mandalay Bay Surf Ballroom B
• 2247: API Platforms are Not "Just Another Enterprise Service Bus“
• Tue, 24-Feb 08:00 AM - 09:00 AM- Mandalay Bay Lagoon F
• 2399: IoT + API = Big Opportunities that are Transforming Businesses into Digital Enterprises
• Wed, 25-Feb 11:00 AM - 12:00 PM- Mandalay Bay Surf Ballroom B
• 2405: Banking on APIs
• Mon, 23-Feb 11:00 AM - 12:00 PM- Mandalay Bay Lagoon F
• 2583: Best Practices in API Management Initiatives
• Tue, 24-Feb 08:00 AM - 09:00 AM- Mandalay Bay Surf Ballroom B
• 3079: Public, Private and Hybrid APIs: What is Right for You?
• Tue, 24-Feb 09:30 AM - 10:30 AM- Mandalay Bay Lagoon F
• 3207: Hosting Your API Hackathon with IBM API Management
• Mon, 23-Feb 11:00 AM - 12:00 PM- Mandalay Bay Surf Ballroom B
• 3280: API Economy Panel with Industry Experts- John Musser and Mehdi Medjaoui
• Wed, 25-Feb 12:30 PM - 01:30 PM- Mandalay Bay Reef Ballroom D
• 3723: Ensure Your Web APIs are More than Just a Pretty Façade
• Wed, 25-Feb 12:30 PM - 01:30 PM- Mandalay Bay Lagoon F
Expo Theater
• 6105: Defining, Publishing and Managing Your APIs in the Cloud
• Tue, 24-Feb 09:00 AM – 09:50 AM
© 2015 IBM Corporation
6613: IBM API
Management Demo
• Mon, 23-Feb 06:00 PM-
06:50 PM- Application
Infrastructure
Engagement Center
Dev@ Conference
6169: Got 5 minutes? Build a Custom
Developer Portal to Publish Your APIs
• Mon, 23-Feb 03:00 PM – 05:00 PM- MGM
Grand, Dev@ conference, Developer
Playground
• Tue, 24-Feb 12:00 PM – 02:00 PM- MGM
Grand, Dev@ conference, Developer
Playground

45. API Management Sessions at InterConnect 2015
Product sessions
• 2381: Manage your APIs Securely and Easily: IBM API Management Product Introduction
• Mon, 23-Feb 03:30 PM - 04:30 PM- Mandalay Bay Lagoon F
• 2394: Managing APIs in a Hybrid World
• Tue, 24-Feb 11:00 AM - 12:00 PM- Mandalay Bay Reef Ballroom D
• 4573: API Management for IBM MobileFirst Platform
• Tue, 24-Feb 12:30 PM -1:30PM- Mandalay Bay, Mandalay Ballroom C
• 2401: IBM Bluemix & API Management: Consume APIs from the API Management Portal
• Tue, 24-Feb 02:00 PM - 03:00 PM- Mandalay Bay Lagoon F
• 2382: What's New in IBM API Management
• Tue, 24-Feb 03:30 PM - 04:30 PM- Mandalay Bay Lagoon F
• 2393: Manage All Your APIs and Services in a Single API Catalog
• Tue, 24-Feb 05:30 PM - 06:30 PM- Mandalay Bay Lagoon F
• 5418: Discovery of Enterprise/z Systems Assets for API Management
• Wed, 25-Feb 08:00 AM - 09:00 AM- Mandalay Bay Surf Ballroom B
• 1177: Best Practices when Creating Your Own Cloud-Hosted API Management Platform
• Wed, 25-Feb 05:30 PM - 06:30 PM- Mandalay Bay Surf Ballroom B
• 2323: Policy-driven API Control with IBM API Management
• Thu, 26-Feb 09:00 AM - 10:00 AM- Mandalay Bay Lagoon F
• 2389: IBM's “API-First” Approach: A Closer Look at Managing Your APIs with Our APIs
• Thu, 26-Feb 09:00 AM - 10:00 AM-Mandalay Bay Surf Ballroom B
• 2398: Integrating Mobile Apps with Enterprise/Third-Party APIs Quickly and Securely
• Thu, 26-Feb 01:00 PM - 02:00 PM-Mandalay Bay Lagoon F
• 3148: Topologies for Implementation of IBM API Management
• Thu, 26-Feb 01:00 PM - 02:00 PM- Mandalay Bay Surf Ballroom B
Hands-on Labs
• 3336: IBM API Management Basics: Hands-On Experience for Beginners
• Wed, 25-Feb 08:00 AM - 10:00 AM Mandalay Bay South Seas Ballroom G
• 4037: IBM API Management Advanced Lab: Securing Your APIs with OAuth and Adding a Custom Policy
• Thu, 26-Feb 08:00 AM - 10:00 AM Mandalay Bay South Seas Ballroom B
4
2376: IBM API
Management Customer
Feedback Session
• Tue, 24-Feb 09:30 AM -
10:30 AM- Mandalay Bay
Tropics B
• Wed, 25-Feb 05:30 PM -
06:30 PM-Mandalay Bay
Tropics B
• Thu, 26-Feb 10:30 AM -
11:30 AM-Mandalay Bay
Tropics B
3276: Meet the IBM API
Management Experts
• Mon, 23-Feb 05:00 PM –
05:50 PM- Mandalay Bay,
Meet the Experts Forum #1
© 2015 IBM Corporation

46. Backup

47. A closer look

48. API Developer
• How do I assemble APIs?
• How do I manage security?
• Will the infrastructure scale?
• How do I measure
performance?
App Developer
• Where do I access
APIs?
• How do I understand the
APIs?
• How do I measure
success?
API Product Manager
• How can I rapidly release & update my
APIs?
• How do I publicize my API?
• How do I measure success?
Operations Lead*
• How do I manage all the
API Environments that are
being requested?
• How can I scale each
environment?
• How can I easily find and
fix issues?
API Success Requires Addressing Needs of
Multiple Stakeholders
* Not applicable to SaaS

49. Intuitively and iteratively define
APIs and associated policies
Rapidly assemble APIs via
configuration, not coding
Minimize risk with industry leading
security & scalability
Define
API
Develope
r
Assemble
Meter
SecureDeploy,
Test & Debug
Monitor
Scale
Version
48
API Developer: Create, Secure & Version APIs
Simple interface accelerates iterative API development & deployment

50. API Developer:
Easily find & create REST and SOAP APIs
 Define the REST or
SOAP API you wish to
expose
 Import WSDL, Swagger
or REST/SOAP APIs
from a registry
 Search for, add custom
tags to, and mark
favorite APIs for easier
discovery

51. API Developer:
Assemble New APIs Through Configuration
 Assemble a new API
by combining multiple
REST or SOAP
services into a
composite API
 Provide examples of
the request and
response messages,
headers and
parameters
 Drag and connect
linking the request and
response messages
 Transform the
message elements
with a click

52. API Developer: Secure the API
 Identify application
with Client ID &
Secret
 Authenticate using
LDAP or
Authentication URL
 Authorize using
OAuth 2.0 support
with implicit grant
type, authorization
code, resource
owner, client
credentials
 Set configuration
properties

53. API Developer:
Version & Clone an API for iterative development
 Version the API
configuration in just
one click
 Revert to prior version
 Create an API by
copying a specific
version of an existing
API

54. API Developer: Test the API
 Interactive test of an
API resource in just
one click
 Provide parameters
and receive response
 Allows quick, iterative
develop / deploy / test
cycles

55. API Provider: Customize each API Portal
54
Tailor the look and feel of
each Developer Portal and
create many Portals
•Company Logo
•Browser icon
•Marketing Image
•Background Color
•Font
•Terms of Service URL
•Support Link
•Twitter ID
•Website URL

56. Catalog APIs Management layer Gateway layerContent
Management
System
+
=
Build a Custom API Portal
…
Custom API Portal
API Provider can
-manage community content, blogs, forums
API User can
-view & interact with published APIs on API portal
-manage their apps
-report a problem
-participate in forums

57. API Provider: Create Custom Roles &
Manage Role Access
•As the owner or
administrator,
you can create
your own
custom roles
that reflect your
unique
organizational
needs
•Specify which
permissions are
to be assigned
for each role

58. API Provider: Control App & Portal access
57
•Suspend/Resume
App
• Block/allow App
from invoking
APIs
•Viewer Role
•Enable a view-
only app
developer role
•By invitation only
• Enable app
developer
onboarding by
invitation only

59. API Provider: “Productize” APIs using Plans
 Introduce API
Trial Use
 Free, limited
plans can be
made available
alongside
premium plans
 For example, a
free plan could
be
unrestricted,
and a premium
plan restricted

60. API Provider: “Productize” APIs using Plans
 Quick and
easy for
developers to
register for the
free plan and
start testing
APIs
 Multiple
available
plans
presented to
developers for
comparison

61. API Provider: “Productize” APIs using Plans
 Include multiple APIs
and Resources per
Plan
 Version your Plans
 Apply Rate Limit by
Plan or Resource
 Reject calls when limit
reached

62. API Provider: Centrally manage all Plans
• Easily
publish,
republish,
unpublish,
undeploy
Plans
• View
subscription
approval
requests
• View the
analytics
details for
each Plan
version
• View
developer
organization
API usage

63. API Provider: Publish plans to select developer
communities or portals
 Fine grained control
over plan deployment
 Decide which
environments or
portals to deploy
Plans to
 Determine visibility for
developer
communities
 Non-disruptive
Publish: Replace a
currently published
version of a Plan
without any disruption
in API availability

64. API Provider: Publish your APIs to multiple
developer portals
Multiple Developer Portals
API Manager
API Provider
App Developers
In group 1
App
Developers in
group 2
Securely share APIs/Plans with various
select developer communities

65. API Provider: Gain Business Insights
• Pinpoint key
market
fluctuations and
find
correlations
related to your
business
• Business
Analytics for
both API provider
and application
developer:
• Top traffic
producing
API ,
• Top
application
producing
traffic

66. API Provider: Optimize / Analyze API Performance
• Analyze
performance of
APIs with full
lucene query
syntax
• Structured
Filtered Search
across analytics
for example
• country:USA,
color:red
• Saved Searches
and Filters for
easy and
consistent
retrieval
• Bookmarkable
queries

67. API Provider: Optimize / Analyze API Performance
• Scope queries
by environment,
plan, API,
developer,
application, time
period
• Example queries
for response
times and
response codes
• Enables
chargeback or
billing for API
consumption by
developers
through export
of activity as
.csv file

68. API Provider: Optimize / Analyze Highly-used APIs
• Dig deeper
into the
high-use
APIs by
scoping
the
Analytics
view
• Focus on
just an
API, or
individual
resource
within an
API

69. App Developer: Interactive developer portals
 Create unlimited self-
service developer
portals to explore APIs
 Browse API
documentation
 Role-based access
for viewing APIs

70. App Developer: Try out APIs with liveDocs
 Call API resource with
just one click
 Provide parameters
and receive response
 generate cURL
commands to run
outside of the
Developer Portal

71. App Developer: Register application
 Register new
application
 Request
security keys
with enhanced
privacy
 Deferred
retrieval of
client secret

72. App Developer: Browse Plans
 Browse available
Plans with limits and
choose from
available plans
 Request access to
Plans
 Use Plan & Select
application

73. App Developer: Use Plan with Application
 Register new
application
 Request
security keys
 Analyze
Application
usage of APIs

74. App Developer: Client Application Authorization Revocation
Developers
will be
notified by
email when
their
application is
suspended
and/or
resumed,
and the
Portal will
also make
this clear

75. App Developer: Upgrade Plan
When
developer
outgrows the
free plan, they
can simply
upgrade to the
premium plan
via the Portal –
pending an
approval
process if
desired

76. App Developer: Analyze App Performance, Get notified
 Monitor most
active
applications and
APIs
 Rate limit
developer
notifications

77. IT Admin: Manage Overall Environment
 At-a-glance
server
utilization
metrics
 Management &
Gateway
Server
utilization -
CPU, Memory,
Disk
 Usage over
time available
by drilling down
* Not applicable to SaaS

78. IT Admin: Optimize / Analyze API Runtime Monitoring
 At-a-glance
server
utilization
metrics
 Log file export
functionality
 Usage over
time available
by drilling down
 Server
utilization,
throughput
(KB/s and
requests/s),
average latency
 Multiple
Gateway
Cluster support
* Not applicable to SaaS

79. IT Admin:
Support many organizations with one solution
 Multi-tenant
support for
multi-provider
organizations
 Provider and
Consumer
organization
Visibility
 Alerts &
notifications
 Send email
directly through
console
* Not applicable to SaaS

80. IT Admin: Manage SSL profiles
 Use SSL
profiles to
manage SSL
certificates for
secure
transmission of
data
 Add certificates,
SSL version
and cipher suite
to API Manager
* Not applicable to SaaS

81. IT Admin: Setup in minutes
 Easy out of the
box setup
 LDAP or
internal identity
provider
support
 Add new user
registries to
securely
authenticate
your
environments
and APIs
* Not applicable to SaaS

82. IT Admin: Setup in minutes
* Not applicable to SaaS
 Choose the
connection
method to each
of the consoles
 Provide the
details of an
existing SMTP
server and
configure API
Management to
generate
emails, where
required

83. Where does API Management fit?
On-premise
private
Off-premise
SaaS
Off-premise
dedicated

84. Developer
organizations
(consume APIs
develop Apps)
API Provider
organizations
Users
Cloud
system
admin
Clusters
of
servers
User registry
(identity provider)
email server
configuration
Anatomy of API Management
IBM /apimanagement 15
Developer
portal
API Manager
Cloud
Management
Console

85. Catalog APIs Management layer Gateway layerContent
Management
System
+
=
Build a Custom API Portal
…
Custom API Portal
API Provider can
-manage community content, blogs, forums
API User can
-view & interact with published APIs on API portal
-manage their apps
-report a problem
-participate in forums

86. A successful API initiative requires end-to-end focus
APIs
Apps
Social Feedback and Communities
Marketplace
Self-Service Portal: Registration • Documentation • Sandbox
Security, Metering and
Control
API Design and Integration
Analytics and Monetization
API Lifecycle Management
Composition
Infrastructure Services
DevOps and App
Management
Mobile Services
Internal
Developers
Partner
Developers
External
Developers
Channels: Smartphones • Tablets • Desktops • Cars • TVs • Others
Services: Data • Processes • Applications
Cloud

87. The API Provider’s Journey
Internal
developers
Partner developers
Public APIs
3rd party services
Public developers
Hackathons
Innovate, Motivate, Iterate
1
2
3
Freemium plans
Monetize
Chargeback
Pay
Private APIs
Partner APIs
Enterprise data
Application logic
Systems of Record

88. Notices and Disclaimers
Copyright © 2015 by International Business Machines Corporation (IBM). No part of this document may be reproduced or
transmitted in any form without written permission from IBM.
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with
IBM.
Information in these presentations (including information relating to products that have not yet been announced by IBM) has been
reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM
shall have no responsibility to update this information. THIS DOCUMENT IS DISTRIBUTED "AS IS" WITHOUT ANY WARRANTY,
EITHER EXPRESS OR IMPLIED. IN NO EVENT SHALL IBM BE LIABLE FOR ANY DAMAGE ARISING FROM THE USE OF
THIS INFORMATION, INCLUDING BUT NOT LIMITED TO, LOSS OF DATA, BUSINESS INTERRUPTION, LOSS OF PROFIT
OR LOSS OF OPPORTUNITY. IBM products and services are warranted according to the terms and conditions of the
agreements under which they are provided.
Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without
notice.
Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are
presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual
performance, cost, savings or other results in other operating environments may vary.
References in this document to IBM products, programs, or services does not imply that IBM intends to make such products,
programs or services available in all countries in which IBM operates or does business.
Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not
necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither
intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation.
It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal
counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s
business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or
represent or warrant that its services or products will ensure that the customer is in compliance with any law.

89. Notices and Disclaimers (con’t)
Information concerning non-IBM products was obtained from the suppliers of those products, their published
announcements or other publicly available sources. IBM has not tested those products in connection with this
publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM
products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.
IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to
interoperate with IBM’s products. IBM EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESSED OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE.
The provision of the information contained herein is not intended to, and does not, grant any right or license under any
IBM patents, copyrights, trademarks or other intellectual property right.
• IBM, the IBM logo, ibm.com, Bluemix, Blueworks Live, CICS, Clearcase, DOORS®, Enterprise Document
Management System™, Global Business Services ®, Global Technology Services ®, Information on Demand,
ILOG, Maximo®, MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™,
PureApplication®, pureCluster™, PureCoverage®, PureData®, PureExperience®, PureFlex®, pureQuery®,
pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, SoDA, SPSS, StoredIQ, Tivoli®, Trusteer®,
urban{code}®, Watson, WebSphere®, Worklight®, X-Force® and System z® Z/OS, are trademarks of
International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and
service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on
the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.

90. Thank You
Your Feedback is
Important!
Access the InterConnect 2015
Conference CONNECT Attendee
Portal to complete your session
surveys from your smartphone,
laptop or conference kiosk.