1. Managing and Monitoring your SOA Environment
David Curbishley
Certified IT Specialist

2. Agenda IT Service Management
Management Touch Points in an SOA Reference Architecture
Managing SOA by Managing the Layers of Abstraction in an SOA IT Architecture
Mapping to the IBM Products

3. Current State of IT Management
More than 70% of IT budgets are currently devoted to the maintenance and operations of existing applications and systems.
The Yankee Group, 3/05

4. Managing Cost and Responsiveness Across IT Silos Composite Applications Introduce Management Challenges
Application Experts and Tools
Database
Experts and Tools
Desktop Experts and Tools
Network
Server Experts and Tools
Mainframe Experts and Tools
Storage Experts and Tools
Availability Management
www
Change Management
Labor Cost
Service Level Management
Security Management
Information Lifecycle Management
The evolution in IT management has led to resource-oriented silos such as database experts and tools, and network experts and tools.
This leads to inconsistencies and duplication of processes … and results in increased labor costs.
Customers need to build on top of the resource management assets to develop horizontal repeatable process-oriented solutions that can achieve higher levels of efficiencies in their organizations.
This DOES NOT MEAN reducing headcount. It means doing more with the same.
Today, technical silos of expertise are not effective in managing a composite application infrastructure.
Application visualization is provided by front-end Web servers, new business logic is being deployed on a new infrastructure of applications servers and these have been integrated with legacy systems and applications. The composite application infrastructure is going to get more complex with the implementation of service oriented architectures.
Today most application interruptions or performance problems are reported to IT by end users of the business service. The challenge remains the same to provide the right information, to the right people at the right time so they can take an action but how that information is moved across the silos of technical expertise within IT is going to change.
What is needed today is a platform that will integrate the core process by which IT operates. These integrated processes will serve as the new platform for IT Service Management, reducing the labor cost associated with managing IT Services and increasing the effectiveness of IT operations.
The potential benefits are huge. Approximately $600B is spent on IT "In House Labor" and more than 80% is allocated just to keep IT up and running. Just imagine the amount of savings if IT can only gain 10% productivity in the execution of their internal processes.
Release Management
Sense
Isolate
Diagnose
Take
Action
Evaluate
Time
Existing State
Desired State Through Process Automation

5. IBM IT Service Management Built on the SOA Foundation
Service Delivery & Support
Service Deployment
Information Management
Business Resilience
IT CRM & Business Management
IBM IT Service Management
IT Operational Management Products
IT Service Management Platform
IT Process Management Products
Change and Configuration Management Database
Best Practices
Server, Network and Device Management
Storage Management
Security Management
Business Application Management
We have a very comprehensive and flexible IT Service Management Portfolio.
This build chart shows the broad categories of IT operational management products and IT process management products offered by IBM Tivoli.
In between these two sets of products is the IT Service Management platform that integrates them -- the Change and Configuration Management Database (CCMDB).
This chart demonstrates that we offer a very comprehensive portfolio of IT Service Management products.
This is the new expanded view of our IT Service Management Portfolio, replacing the old “automation blueprint” view.

6. SOA Exposes New Management Pains in Application Lifecycle
How can I be sure that the service flow matches the design?
“How can I debug my production application without reproducing the problem?”
“How do I ensure my services are secured appropriately?”
“What’s the root cause of this service problem – the service flow or the application components?”
“Some of our services are used by our customers. How can I be sure we are meeting our SLAs?”
“I need a service, what are its characteristics? ”
What are the Service Levels that apply to this Service?
**Main point: The importance of a lifecycle approach to SOA
Our customers have told us that they take a lifecycle approach to SOA. They start in what we are calling the Model phase by gathering business requirements and designing and optimizing their desired business processes. Once they have optimized the business processes, they implement it by combining new and existing services to form composite applications. The assets are then deployed into a secure and integrated environment taking advantage of specialized services that provide support for integrating people, processes and information. Once deployed, customers manage and monitor the composite applications and underlying resources from both an IT and a business perspective. Information gathered during the Manage phase is used to gain real-time insight into business processes enabling better business decisions and feeding information back into the lifecycle for continuous process improvement. Underpinning all of these lifecycle stages is governance which provide guidance and oversight for the SOA project.
The base chart shows a sub-set of SOA-related questions that arise across the entire life-cycle. For example, when finding a service it is no only necessary to ensure that its capabilities match your requirements, you also need to understand the characteristics of the deployed service, e.g. capacity, performance, security, cost etc to determine whether it really meets your needs, since if they don’t, the application won’t behave as you had planned. IT Service Management Change Management processes can ensure the steps necessary to deploying new SOA applications are followed, e.g. by ensuring that capacity planning exercises are carried out or that any new security requirements are implemented..
The second chart shows the key functions for each of the four phases of building and deploying an SOA and, as shown in the bottom left bullets, the necessary characteristics of the whole process.

7. SOA Reference Architecture Supporting The SOA Lifecycle
Apps &
Info Assets
Business Innovation & Optimization Services
Development Services
Interaction Services
Process Services
Information Services
Partner Services
Business App Services
Access Services
Integrated environment for design and creation of solution assets
Manage and secure services, applications & resources
Facilitates better decision-making with real-time business information
Enables collaboration between people, processes & information
Orchestrate and automate business processes
Manages diverse data and content in a unified manner
Connect with trading partners
Build on a robust, scaleable, and secure services environment
Facilitates interactions with existing information and application assets
ESB
Facilitates communication between services
IT Service Management
Infrastructure Services
Optimizes throughput, availability and performance
Provides automation of IT processes (ITIL-based) and tasks (technology-based)
Provides core monitoring
Exposes metrics in terms of service level agreements between consumers and providers
Centralizes security management
Federation of identities
In conjunction with ESB, can also provide enforcement of SLAs
The SOA reference architecture is a way of looking at the set of services that go into building an SOA. The services that focus on SOA Management are:
Development Services which are used to implement custom artifacts that leverage the infrastructure capabilities
Business Innovation & Optimization Services which are used to monitor and manage the runtime implementations at both the IT and business process levels
Infrastructure Services which are used to optimize throughput, availability and performance
IT Services Management Services which include capabilities that relate to scale and performance, for example edge services, clustering services, and virtualization capabilities that allow efficient use of computing resources based on load patterns.
The SOA Reference Architecture is a complete and comprehensive architecture that covers all the integration needs of an enterprise. Its services are well integrated and are delivered in a modular way, allowing SOA implementations to start at a small project level. As each additional project is addressed, new functions can be easily added, incrementally enhancing the scope of integration across the enterprise.

8. SOA Reference Architecture Supporting The SOA Lifecycle
Apps &
Info Assets
Business Innovation & Optimization Services
Development Services
Interaction Services
Process Services
Information Services
Partner Services
Business App Services
Access Services
Integrated environment for design and creation of solution assets
Manage and secure services, applications & resources
Facilitates better decision-making with real-time business information
Enables collaboration between people, processes & information
Orchestrate and automate business processes
Manages diverse data and content in a unified manner
Connect with trading partners
Build on a robust, scaleable, and secure services environment
Facilitates interactions with existing information and application assets
ESB
Facilitates communication between services
IT Service Management
Infrastructure Services
Optimizes throughput, availability and performance
Provides monitoring and management at business process level
The SOA reference architecture is a way of looking at the set of services that go into building an SOA. The services that focus on SOA Management are:
Development Services which are used to implement custom artifacts that leverage the infrastructure capabilities
Business Innovation & Optimization Services which are used to monitor and manage the runtime implementations at both the IT and business process levels
Infrastructure Services which are used to optimize throughput, availability and performance
IT Services Management Services which include capabilities that relate to scale and performance, for example edge services, clustering services, and virtualization capabilities that allow efficient use of computing resources based on load patterns.
The SOA Reference Architecture is a complete and comprehensive architecture that covers all the integration needs of an enterprise. Its services are well integrated and are delivered in a modular way, allowing SOA implementations to start at a small project level. As each additional project is addressed, new functions can be easily added, incrementally enhancing the scope of integration across the enterprise.

9. SOA Reference Architecture Supporting The SOA Lifecycle
Info Assets
Apps &
Business Innovation & Optimization Services
Development Services
Interaction Services
Process Services
Information Services
Partner Services
Business App Services
Access Services
Integrated environment for design and creation of solution assets
Manage and secure services, applications & resources
Facilitates better decision-making with real-time business information
Enables collaboration between people, processes & information
Orchestrate and automate business processes
Manages diverse data and content in a unified manner
Connect with trading partners
Build on a robust, scaleable, and secure services environment
Facilitates interactions with existing information and application assets
ESB
Facilitates communication between services
IT Service Management
Infrastructure Services
Optimizes throughput, availability and performance
Provides feedback to application support, test and design tools
Provides access to operational data
The SOA reference architecture is a way of looking at the set of services that go into building an SOA. The services that focus on SOA Management are:
Development Services which are used to implement custom artifacts that leverage the infrastructure capabilities
Business Innovation & Optimization Services which are used to monitor and manage the runtime implementations at both the IT and business process levels
Infrastructure Services which are used to optimize throughput, availability and performance
IT Services Management Services which include capabilities that relate to scale and performance, for example edge services, clustering services, and virtualization capabilities that allow efficient use of computing resources based on load patterns.
The SOA Reference Architecture is a complete and comprehensive architecture that covers all the integration needs of an enterprise. Its services are well integrated and are delivered in a modular way, allowing SOA implementations to start at a small project level. As each additional project is addressed, new functions can be easily added, incrementally enhancing the scope of integration across the enterprise.

10. Requirements for SOA Management
Services
atomic and composite
Operational Systems
Service Components
Consumers
Business Process
Composition; choreography;
business state machines
Service Provider
Service Consumer
Integration (Enterprise Service Bus)
Monitoring Infrastructure Services)
QoS Layer (Security, Management &
Data Architecture (meta-data) &
Business Intelligence
Governance
Channel
B2B
Packaged
Application
Custom OO
Atomic Service
Composite Service
Registry
The second management area that we will discuss is managing Service Relationships, which includes:
Understanding how services relate to each other and to the IT infrastructure and business process layers
Controlling the message flow in the service environment through management mediations like log, filter, and route
Centralizing services management policy
Setting business-related IT goals

11. Requirements for SOA Management
Business Process Monitoring: Monitor state of business processes
Channel
B2B
Consumers
Service Consumer
Business Process
Composition; choreography;
business state machines
Monitoring Infrastructure Services)
QoS Layer (Security, Management &
Data Architecture (meta-data) &
Business Intelligence
Integration (Enterprise Service Bus)
Governance
Services
atomic and composite
Service Components
Service Provider
The second management area that we will discuss is managing Service Relationships, which includes:
Understanding how services relate to each other and to the IT infrastructure and business process layers
Controlling the message flow in the service environment through management mediations like log, filter, and route
Centralizing services management policy
Setting business-related IT goals
Packaged
Application
Custom
Application OO
Application
Operational Systems
Atomic Service
Composite Service
Registry

12. Business Process Monitoring
Report on business performance measured against targets (scorecard)
Share growth and new product revenue
Track business process flow
Status of particular insurance claim
Bottlenecks due to human tasks
Monitor business process metrics
Duration, cost, branch ratios
Business Analysis through aggregation and multidimensional reporting
Total monthly revenue by customer
The ability to optimize business processes is a key aspect to overall SOA management. Misalignment of business processes or a bottleneck in workflow can jeopardize goals crucial to the success of your business. With greater visibility into your business processes and events, you can more easily identify—and resolve—potential problems before they pose a threat to your business goals.
For example, you need the ability to report on business performance measured against your targets, track business process flow, monitor business process metrics, and analyze your business through aggregation and multi-dimensional reporting.
You’ll be able to monitor your processes from end to end to show an up-to-the-minute view of your enterprise performance.

13. Requirements for SOA Management
Manage Transaction Performance: Measure transaction response times to discover bottlenecks, isolate infrastructure
Channel
B2B
Consumers
Service Consumer
Business Process
Composition; choreography;
business state machines
Monitoring Infrastructure Services)
QoS Layer (Security, Management &
Data Architecture (meta-data) &
Business Intelligence
Integration (Enterprise Service Bus)
Governance
Services
atomic and composite
Service Components
Service Provider
The second management area that we will discuss is managing Service Relationships, which includes:
Understanding how services relate to each other and to the IT infrastructure and business process layers
Controlling the message flow in the service environment through management mediations like log, filter, and route
Centralizing services management policy
Setting business-related IT goals
Packaged
Application
Custom
Application OO
Application
Operational Systems
Atomic Service
Composite Service
Registry

14. ITCAM for Response Time Tracking
Manage Transaction Performance Provide Key Response Time Metrics Across Platforms
Customers find it very difficult to identify and isolate performance bottlenecks in composite applications that span technology and platform boundaries
Need to provide performance instrumentation that is lightweight and can be dynamically configured to identify problems before customers call
ARM-based instrumentation is the industry standard that can be leveraged to isolate the problem
ITCAM for Response Time Tracking
ITCAM for WebSphere
Typically in complex web application environment, it takes too long to identify and isolate performance bottlenecks. You need the ability to quickly identify where and with which component the bottleneck or failure occurred via graphical topology for fast resolution and recovery.

15. Requirements for SOA Management
Services Management: Discover, monitor, secure and manage services to meet SLAs
Channel
B2B
Consumers
Service Consumer
Business Process
Composition; choreography;
business state machines
Monitoring Infrastructure Services)
QoS Layer (Security, Management &
Data Architecture (meta-data) &
Business Intelligence
Integration (Enterprise Service Bus)
Governance
Services
atomic and composite
Service Components
Service Provider
The second management area that we will discuss is managing Service Relationships, which includes:
Understanding how services relate to each other and to the IT infrastructure and business process layers
Controlling the message flow in the service environment through management mediations like log, filter, and route
Centralizing services management policy
Setting business-related IT goals
Packaged
Application
Custom
Application OO
Application
Operational Systems
Atomic Service
Composite Service
Registry

16. Services Management Lifecycle Support for Web Services
To ensure service levels conform to agreed upon specifications, you need:
Views and analysis of Web service interactions for IT Operations to quickly identify source of errors, and take corrective action through situations, workflow and mediations
Detailed views of operational SOAP/XML message content, flow patterns and topology for Web services experts and support teams
Highly performing and flexible enforcement points
IT Operations
“Don’t give me another console”
Web Services Expert
“Show me the service details!”

17. Requirements for SOA Management
Manage the Infrastructure: Deep dives into specific resources
Channel
B2B
Consumers
Service Consumer
Business Process
Composition; choreography;
business state machines
Monitoring Infrastructure Services)
QoS Layer (Security, Management &
Data Architecture (meta-data) &
Business Intelligence
Integration (Enterprise Service Bus)
Governance
Services
atomic and composite
Service Components
Service Provider
The second management area that we will discuss is managing Service Relationships, which includes:
Understanding how services relate to each other and to the IT infrastructure and business process layers
Controlling the message flow in the service environment through management mediations like log, filter, and route
Centralizing services management policy
Setting business-related IT goals
Packaged
Application
Custom
Application OO
Application
Operational Systems
Atomic Service
Composite Service
Registry

18. Manage Supporting Middleware Comprehensive Deep-dive Monitoring
Identify and quickly correct applications that are down or performing slowly
Need to provide comprehensive in-flight transaction display that includes the name of the hung class/method
Introspect messaging and brokering subsystem for real-time metrics and historical data analysis
This can significantly improve the performance and availability of J2EE applications by reducing problem identification and resolution time
IT Operations
Subject Matter Expert
J2EE Applications
Messaging Infrastructure

19. Manage Service Levels Enterprise-wide Reporting on Service Level Compliance
Need to define reports on a customer basis
Report on compliance to service levels and service level agreements
Represent all aspects of service level performance, from business process layer to IT infrastructure
Perform trending analysis to predict outages

20. Enterprise Service Bus and SOA Management
Management tools naturally target ESBs as enforcement endpoints:
NEW Check
Traveler
Service
Travel
Reservation
Process
Check Credit
Service
Book Flight
Service
To perform Routing of messages based on system capacity, Quality of Service, and SLAs
Leverage Conversion and Transformation capabilities to comply with policy
Centralize Handling of IT events related to Services
Service Management Leveraging the ESB
Enterprise Service Bus
Hotel
Availability
Service
Flight
Availability
Service
Book Hotel
Service
Book Car
Service
NEW Flight
Availability
Service
OLD Flight
Availability
Service

21. A Continuation of IBM’s Commitment to SOA and Simplicity
An SOA Appliance…
Simplifies SOA with specialized devices
Accelerates SOA with faster XML throughput
Helps protect SOA XML implementations
IBM is re-defining the boundaries of middleware extending the SOA Foundation with specialized, consumable, dedicated SOA appliances that combine superior performance and hardened security for SOA implementations
Our approach is a blend of these 2 types of solutions

22. SOA Security What is “Federated Identity Management”?
Definition
An “identity federation” is a federation in which identity management (authentication, access control, auditing, and provisioning) is distributed between the partners based on their role within the federation
An Identity Federation can allow users from one federation partner to seamlessly access resources from another partner in a secure and trustworthy manner
Roles
End user
Identity Provider (IdP)
Service Provider (SP)
Functions
Single Sign-On/Sign-Off (including “global” sign-off)
Provisioning/De-provisioning
Account Linking/De-linking

23. Managing Identities and Access to Cross-company Resources
User
Company C
Insurance Provider
Employee Travel
Company A
Healthcare Provider
Company D
Partner
Third Party
Third-Party Access
Direct Access
Business Portal
Stock Options
Company B
Enable companies to manage “users” or “identities” that are now under their control, reducing high identity management costs
Enable users to easily navigate between Web sites while maintaining a single login identity, improving user experience
Provide companies with a common way to network identities between different companies or between applications, simplifying service integration

24. Addressing the Identity Integration Issue Capabilities of a Complete Federated Identity Solution
Federation Introduction/Termination Federated Single Sign On, Single Sign Off Session Management Integration with Identity and Access Management Integration with middleware platforms
Federated User Experience
Federated User
Lifecycle Management
Partner enrollment/De-enrollment Partner Provisioning/De-Provisioning of identity accounts Partner User Registration
Web Services Security Management
Authentication for service access Service access control Seamless integration of disparate applications
Trust Management Platform
Partner Key Management Trust Service, Security Token Service Identity and Authorization Services

25. Mapping to the IBM Products
WebSphere Business
Monitor
Tivoli ITSM Process Managers
Tivoli Federated Identity Manager
Apps &
Info Assets
Business Innovation & Optimization Services
Development Services
Interaction Services
Process Services
Information Services
Partner Services
Business App Services
Access Services
Integrated environment for design and creation of solution assets
Manage and secure services, applications & resources
Facilitates better decision-making with real-time business information
Enables collaboration between people, processes & information
Orchestrate and automate business processes
Manages diverse data in a unified manner
Connect with trading partners
Build on a robust, scaleable, and secure services environment
Facilitates interactions with existing information and application assets
ESB
Facilitates communication between services
IT Service Management
Infrastructure Services
Optimizes throughput, availability and performance
Tivoli Service Level Advisor
Tivoli Composite Application Managers
Tivoli OMEGAMON XE for Messaging
Now, let’s map the IBM Products to the SOA reference architecture, summarizing the value of each offering:
MANAGE BUSINESS PROCESS
WebSphere Business Monitor
Real-time Business process monitoring
MANAGE SERVICE LAYER
Tivoli CAM for SOA
Web Services automated mediation and monitoring
MANAGE TRANSACTION PERFORMANCE
Tivoli CAM for RTT
End-to-end response time tracking and problem isolation
MANAGE SUPPORTING MIDDLEWARE
Tivoli CAM for WebSphere
Problem determination and resource analysis for WebSphere application performance, including CICS, MQ, IMS
MANAGE SOA SECURITY
Tivoli FIM
Model for managing identity and access to resources that span companies or security domains
WebSphere DataPower SOA Appliance

26. Thank You Gracias Danke Obrigado Merci Grazie Thai Hindi
Traditional Chinese
Russian
Spanish
Obrigado
Thank You
Brazilian Portuguese
Arabic
Danke
Grazie
Merci
Italian
German
French
Simplified Chinese
Tamil
Korean
Japanese