© Copyright IONA Technologies 2002 Why is Web Services Integration a Safe Bet? Eric Newcomer CTO July 10, 2002 DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Welcome! “Big Integration Gain - Little Integration Pain” More Truth About Web Services 12 sessions covering a range of business and technical topics Led by IONA’s experts Broad sponsorship of the series DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Corporate Sponsors Media Sponsors Thanks to Our Sponsors Platinum Sponsors:Gold Sponsors:Silver Sponsors: DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Agenda Web services are defined to be extensible: –SOAP headers –WSDL parts Qualities of service can be added to basic Web services –Features and protocol mapping ebXML example: –adding ebXML metadata using SOAP headers DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Introduction Start with a simple Web service –Search for information –Get a stock quote Later add complexity –Order books –Purchase stock at a given price Extend messages for security, transactions, reliability, process flow DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 What is SOAP? SOAP is a simple, lightweight XML protocol for exchanging structured and typed information on the Web Overall design goal: KISS –Can be implemented in a weekend –Stick to absolutely minimum of functionality Make it Modular and Extensible –No application semantics and no transport semantics –Think “XML datagram” DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP Parts Envelope Header Body Block … Block … Unit of communication Attributes or qualities of the communication Message itself: Procedure call parameters or document DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP messages contain A mandatory extensible envelope to describe –The features and services in a message –The target address for the features and services –Whether they are optional or mandatory An optional set of encoding rules for data that An optional convention for RPC invocation –How to model request/response interactions An optional binding to HTTP Message exchange patterns (MEP) DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP extensibility SOAP "features" include: – Reliability – Security – Correlation – Routing Features also include message exchange patterns (MEPs) : – One-way messages – Request/response – Peer-to-peer conversations DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP Example -- simple 200 DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP Example -- with header Signature 200 DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP Example – HTTP binding POST /Accounts/Eric HTTP/1.1 Host: Content-Length: nnnn Content-Type: application/soap+xml; charset="utf-8" Signature 200 DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Intermediary roles " envelope/role/none" (hereafter simply "none") " envelope/role/next" (hereafter simply "next"), and " envelope/role/ultimateReceiver" (hereafter simply "ultimateReceiver"). DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Qualities of service through transport layering SOAP messages can inherit properties of underlying transports Reliability via queues and persistence mechanisms Binary data via attachments: –SOAP with Attachments (ebXML) –WS-Attachments (Microsoft GXA) DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 HTTP-R – IBM proposal HTTP-R persists status information about SOAP messages: –Using unique Ids to track messages –Includes information about the current state of the message –Information retrieved in the event of failure for guaranteed delivery etc. DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 BEEP –session oriented protocol proposal from IETF BEEP messages are grouped into three styles of exchanges when a client sends a request: –MSG/RPY - server returns a reply after performing a task (this is called a positive reply) –MSG/ERR - server does not perform any task and replies with an error message (this is called a negative reply) –MSG/ANS - server performs a task during the course of which it returns zero or more answer messages MSG/RPY and MSG/ERR are called one-to-one exchanges while MSG/ANS supports one-to-many exchanges. : DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 SOAP mapping to BEEP After establishing a channel: – –MSG Content-Type: application/xml Then send SOAP message as “usual” Multipart messages are supported DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Security and transactions Use extensible SOAP headers and intermediaries XMKS –SOAP headers for public/private key and XML digital signature security S2ML –SOAP headers for authentication and authorization tokens –XML formats for security context Business Transaction Protocol –SOAP messages for propagating results DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Security Example Web Server Web Application iS2 Adapter (Web Server plug-in) IONA Security Service (iS2) iS2 MS Passport Adapter iS2 MS CAPI Adapter Win32 Security API MSCAPI Certificate Store MS Passport session token Native authorization info (e.g. EJBContext) Enterprise Passport Adapter establishes user’s identity via MS Passport Services and utilizes local authorization information ! Obtain trusted credentials for security assertions (if required) Obtain authentication and authorization information MS Passport Verifier Active Directory or PDC DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Security header example DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Correlating transaction context DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 BTP “two-pipe” model DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 BTP example <soap:Envelope xmlns:soap=" soap:encodingStyle=""> soap-http-1 btpengine ABC

© Copyright IONA Technologies 2002 Google URI based service ?q=Skate+boots&btnG=Google+Search DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Google Web service – –- - –- - –- - – – Skate+boots – 0 – 10 – true – – false – – latin1 – DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Electronic Business XML (ebXML) Initiative established by UN/CEFACT and OASIS – replacement for EDI Top-down approach (start with business process) Specifications for business process modeling, messaging, registry, trading partner agreements, core components Much overlap with SOAP, WSDL, UDDI (all same pieces) RosettaNet aligned with ebXML transport DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 ebXML Architecture Business Process Model Model to XML Conversion Registry CPP CPA CRM, ERP, Or Custom Application Interface CRM, ERP, Or Custom Application InterfacePayload Transport DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 ebXML messaging header urn:duns: urn:duns: urn:services:SupplierOrderProcessing NewOrder T11:12:12 DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Process flow language Defines interactions or choreographies of messages Typically extends WSDL Typically between trading partners Web Services Flow Language (WSFL) –IBM proposal –Includes macro and micro flows –Schema specified independent of WSDL DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Process flow – cont. XLANG from Microsoft –Based on BizTalk server –Extends WSDL (same schema file) Both WSFL and XLANG place WSDL services into relationship ebXML defines similar spec – Business Process Specification Schema WSCI, BPMI, etc. Flows can be exposed as Web services DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Process flow added to WSDL <xlang:action operation="AskLastTradePrice" port="pGetRequest" activation="true"/> <xlang:action operation="SendLastTradePrice" port="pSendResponse"/> DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002

XML & Web services for Integration All endpoints “XML-enabled” –XML Schemas and WSDL describe all services –XML processors at endpoints or within integrator Transport XML using multiple protocols –http, smtp etc. for Internet –http, IIOP, JMS, etc. for Intranet Transport messages from source to destination with appropriate Quality of Service Add optional headers, WSDL extensions as required DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 XML/Web services solution SOAP server Integrated Application Or domain Local Transforms Local Data Model Service Description UDDI or ebXML repository SOAP server Integrated Application Or domain Local Transforms Local Data Model Service Description SOAP client XML mapping SOAP/ebXML messages DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 What’s driving Web Services standards-making The grand theme is that the business world is trying to leverage the Internet for commercial purposes –Phase One was all about leveraging existing technologies to build new businesses on the Web –Phase Two is about building new technologies to support existing business DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Current inflection point Some danger of divergence However qualities of service are mostly extensions XML makes it easier to convert from one proposal to another Proprietary or vendor-specific solutions available now DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Integration broker platform Connects existing applications and services Automates business process flows across extended enterprise using Web services and other XML standards Application server platform for developing, deploying and managing business application logic Hosted in J2EE, CORBA or mainframe environments using Web services standards at the core 37 Orbix E2A™ Solution DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Orbix E2A™ Web Services Platform DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Web Services Integration Now! XMLBus.comVisit XMLBus.com and download Orbix E2A™ XMLBus Edition. Sign up for IONA training on Web services XMLBus.comDownload IONA’s Web services white paper at XMLBus.com Check out Orbix E2A™, the first e-Business Platform for Web Services Integration. DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 Questions? DIAL-IN Toll-free International: Passcode: Web Services

© Copyright IONA Technologies 2002 All Webcasts from the Big Integration Gain—Little Integration Pain series are available for viewing at iona.raindance.com Don’t forget IONA World October th, San Diego, CA DIAL-IN Toll-free International: Passcode: Web Services Thank you for joining us!