Secure the Open Enterprisewith CA API Management

Ola Mogstad

DevOps: API Management and Application Development

CA Technologies

Software Engineering Manager

DO3T28T

@OlaMogstad

#CAWorld

Sascha Preibisch

CA Technologies

Principal Software Engineer

@nascarlogin

#CAWorld

2 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

For Informational Purposes Only

© 2015 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.

The content provided in this CA World 2015 presentation is intended for informational purposes only and does not form any type of

warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.

Terms of this Presentation

3 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Abstract

Hands on working session where we will leverage the capabilities of the CA API Gateway to expose and protect an enterprise API—including threat protection, risk-based access control, social login and OAuth 2.0.

Ola Mogstad and Sascha PreibischCA Technologies

4 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Agenda

INTRO AND ARCHITECTURE

WRITING POLICY ON THE CA API GATEWAY

PUTTING IT ALL TOGETHER

THREAT PROTECTION

SERVICE ORCHESTRATION

INTEGRATION

1

2

3

4

5

6

5 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Demo Architecture

Application

Storag

e

Enterprise

Backend

External

Web API

CA Risk

Authentica-

tion Access

Control

CA API Gateway

OAuth 2.0

Authorization

Server

6 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

(Demo)

7 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

Q & A

8 © 2015 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

For More Information

To learn more, please visit:

http://cainc.to/Nv2VOe

CA World ’15