Gravitee API Management is an open-source platform designed for effortlessly managing and securing APIs, featuring a range of tools for lifecycle management, analytics, and user access control. It includes products such as the API Manager, Access Manager, and Alert Engine, providing features like centralized authentication, traffic shaping, and real-time notifications. The platform supports customization and integration with various identity providers and comes with visual tools for API design and monitoring.

1. Brown Bag Thursday 30.09.2021
Gravitee API Management
Ahmet AYDIN

2. Overview of Gravitee Products
What is the Gravitee API Management?
Gravitee API Management Features
Demo

3. Effortless control of your API ecosystem
The Gravitee.io Platform has everything your business needs to integrate your APIs all in one place, allowing you to manage and secure
your APIs effortlessly. Built using an intuitive, configure rather than code approach.
Start with the Open Source Edition of API Manager or Access Manager and effortlessly expand to the Enterprise Edition to benefit from
API Designer, Alert Engine and Cockpit.

4. Gravitee Products

5. Gravitee Products
Gravitee.io API Management is a flexible, lightweight and blazing-fast Open Source solution that helps your organization control who,
when and how users access your APIs. Effortlessly manage the lifecycle of your APIs. Download API Management to document, discover
and publish your APIs.
API Management

6. API Management
Developer Portal
Build the portal that your developers want with a custom theme, full text search and API documentation.
Analytics Dashboard
The out-of-the-box dashboards give you a 360-degree view of your API. You can also build your own dashboards from Gravitee.io or use
all metrics with external tools like Grafana or Kibana.
Secured Plan
Create contracts between your API consumers and APIs - building API products from your backend services.
Register Your API
Create and register APIs in a matter of a few clicks to easily expose your secured APIs to internal and external consumers.
Configure Policies Using Flows
Gravitee.io API Management provides over 50 pre-built policies to effectively shape traffic reaching the gateway according to your
business requirements.
Register Applications
Users and administrators can register applications for consuming APIs with ease. Gravitee.io provides advanced dynamic client
registration to effectively link API Management and Access Management.

7. Gravitee Products
Gravitee.io Access Management is a versatile, streamlined and easy-to-use Open Source Identity and Access Management solution that
offers a centralized Authentication and Authorization Service to secure your applications and your APIs. Open ID Connect certified -
enabling you to control and secure enterprise data with industry standard protocols such as OAuth 2.0 and JWT.
Access Management

8. Access Management
Access Security
Control and secure enterprise data with industry standard protocols such as OpenID Connect and OAuth 2.0 and JWT.
Single Sign-on
Centralized and strong authentication for your customers using out-of-the-box or custom identity providers.
Multi-factor authentication
Enforce security and convenience by adding extra authentication factors.
Passwordless and WebAuthn
Secure your apps and APIs with industry best-practice security using biometrics, tokens and further passwordless auth mechanisms.
Register Your Application
Make it easy for your customers to access your services by simply creating web, mobile or single-page applications and allowing them to use their
existing identity account.
Connect users
Integration with multiple identity providers and custom authentication extension points that enable you to create your own identity and login flows.
Sign-in
Customized and branded sign-in experience with multi-factor authentication brings you security and consistency for your customers at every step.

9. Gravitee Products
Gravitee.io Alert Engine is part of the Enterprise Edition and allows users to configure alerts and receive notifications through different
channels, helping users monitor their API Platform easily and efficiently. Alert your administrators and API owners to spikes in traffic
and further suspicious activity so they are kept abreast of all activity.
Alert Engine

10. Alert Engine
Multi-channel notifications
Notify users of SLA breaches in real time via email, messaging (Slack and MS Teams etc) and webhooks.
Suspicious behavior detection
Alerting your administrators to spikes in traffic and further suspicious activity.
Lightweight
Gravitee.io Alert Engine fits neatly into your event-based architecture.

11. Gravitee Products
Gravitee.io Cockpit unifies the entire platform and is part of the Enterprise Edition. It provides a centralized view of your entire API
ecosystem across your multiple environments. This allows you to manage all your Gravitee.io installations – API Management, Access
Management, Alert Engine & API Designer – in one handy, interactive dashboard.
Cockpit

12. Cockpit
Centralized Management
This brings the existing API Management and Access Management installations together.
Multi-tenancy
Unified console to manage organizations and environments. Benefit from improving an API's lifecycle from one environment to another.
Unified dashboard
This helps you to visualize the components of your system and associated data.
Cockpit Organizational Hierarchy
Gravitee.io Cockpit is based on a hierarchy of three entities:
● Account
● Organization
● Environment
API Designer
The Gravitee.io API Designer enables users to take a visual mind map approach to creating your APIs and OpenAPI specification. This
specification can then be deployed to your API Management module at the click of one button.

13. What is the Gravitee API Management ?

14. API Management
Architecture

15. API Management
Gravitee.io APIM is separated into four main components:
APIM Gateway
APIM Gateway is the core component of the APIM platform. You can think of it like a smart proxy.
Unlike a traditional HTTP proxy, APIM Gateway has the capability to apply policies (i.e., rules) to both HTTP requests and responses according to your
needs. With these policies, you can enhance request and response processing by adding transformations, security, and many other exciting features.
APIM API
This RESTful API exposes services to manage and configure the APIM Console and APIM Portal web UIs. All exposed services are restricted by
authentication and authorization rules. For more information, see the API Reference section.
APIM Console
This web UI gives easy access to some key APIM API services. API Publishers can use it to publish APIs. Administrators can also configure global
platform settings and specific portal settings.
APIM Portal
This web UI gives easy access to some key APIM API services. API Consumers can use it to search for, view, try out and subscribe to a published
API. They can also use it to manage their applications.
Overview

16. API Management
Plugins are additional components that can be plugged into APIM
Gateway or APIM API. They can customize the component’s behavior
to exactly fit your needs and technical constraints.
Plugins

17. API Management

18. API Management
APIM Gateway is the core component of the APIM platform. You can think of it like a smart proxy.
Unlike a traditional HTTP proxy, APIM Gateway has the capability to apply policies (i.e., rules) to both HTTP requests and responses
according to your needs. With these policies, you can enhance request and response processing by adding transformations, security, and
many other exciting features.
APIM Gateway

19. API Management
This RESTful API exposes services to manage and configure the APIM Console and APIM Portal web UIs. All exposed services are
restricted by authentication and authorization rules.
APIM API

20. API Management
This web UI gives easy access to some key APIM API services. API Publishers can use it to publish APIs. Administrators can also
configure global platform settings and specific portal settings.
APIM Console

21. API Management
This web UI gives easy access to some key APIM API services. API Consumers can use it to search for, view, try out and subscribe to a
published API. They can also use it to manage their applications.
APIM Portal

22. API Management

23. API Management

24. API Management

25. API Management

26. Demo

27. ?