1. Information Technology Division Executive Office for Administration and Finance Shared Application Infrastructure (SAI) Program Infrastructure Design - Collaboration Effort PR000002488 – A Strategic Program

2. 3/7/20162 Agenda Team Overview of SAI Program Business Context SAI Components – XML-Aware Edge Device – Enterprise Service Bus – (Rudimentary) Identity Management System – Registry/Repository – Service Governance Use Cases Target Dates Next Steps?

3. Team IPG – Leo Buckley VMWare – Carmen Musto OS - John Vespaziani Security – Paul Zakrzewski Storage – TBD (Dave Webster’s Group) Network – TBD (Dave Webster’s Group) Database – TBD (Manager?) Enterprise Architecture – Simone Pringle (PM) Additional Resources Needed?

4. 3/7/20164 Overview Enterprise Service Bus Adapters Multi-Channel End User Apps Reports &Analytics Service Registry/Repository Identity Management* Service Governance Business Services Service Orchestration Business Process Mgt (BPM) XML Aware Edge Device * Rudimentary Implementation (to be replaced by the Enterprise Identity Management solution when it becomes available).

5. Business Context The Shared Application Infrastructure (SAI) supports the deployment of Service Oriented Architecture (SOA) business processes and applications.

6. SAI Components – Part I XML-Aware Edge Device – Protection against XML Denial of Service (XDoS), SQL injection – Integrates with Symantec Scan Engine (ICAP) – Incoming Protocols: SOAP/HTTP, SOAP/HTTPS, XML/HTTP, XML/HTTPS – Currently: Enterprise XML Gateway (IBM WebSphere DataPower Appliances) Enterprise Service Bus – Adapters at the edge for non-HTTP requests E.g. Protocols –SFTP –MQ Integrates with Symantec Scan Engine – “Smart” Routing URL Content SLA – Payload format transformation, content augmentation – Message delivery – Incoming Protocols: HTTP, HTTP(S), JMS, MQ, SFTP

7. SAI Components – Part II (Rudimentary) Identity Management – Basic authentication, authorization – User name/password, X.509 certificates – Incoming Protocols: HTTPS, LDAP Registry/Repository – Catalog of services – Includes metadata Schema SLAs – Incoming Protocols: HTTP, HTTPS (UDDI, SOAP and XML) Service Governance – Service Monitoring – Dashboarding – Incoming Protocols: HTTP, HTTPS, SNMP

8. Use Cases

9. Target Dates 04/24: Deployment of Test Environment 04/24-06/18: SAI Components in Test 06/19-07/13: SFED in Test 06/15: Deployment of QA Environment 06/15-07/17: SAI Components in QA 07/18-08/10: SFED in QA 07/18: Deployment of Production Environment 07/18-08/31: SAI Components in Production 09/01-10/12: SFED in Production