Fusion Middleware - Überblick Teil einer Referenzarchitektur für die öffentliche Verwaltung

Transcription

1 <Insert Picture Here> Fusion Middleware - Überblick Teil einer Referenzarchitektur für die öffentliche Verwaltung Berthold Maier Chief Architect Oracle Consulting

2 Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle.

3 SOA-Suite 11g Architecture - Overview Worklist Process Portal MS Office BAM, BI Business View BPMN 2.0, BPEL BPMN 2.0 Process Core Human Task (BPEL4People) Business Rules Mediator BPEL JDeveloper Service Infrastructure Enterprise Manager MDS soa-infra

4 Service Layers Mediation Security Governance Monitoring & Management Metadata Management SOA Infrastructure SOA Conceptual View Service Consumers & Delivery Channels Employee s Customer s Partners Terminal IVR Mobi l Client Apps Composite Applications Web Apps Portals Mashups BPM Process Fat Clients Presentation Services Shared Portlets Multi-Channel Delivery Business Process Services Workflow Service Orchestration Business Activity Services Enrichment Custom Business Services Rule Services Validation Decisson HW Roles Data Services Data Caching Data Aggregation Data Synchronization Connectivity Services System Access Messaging Partner Integration Encapsulation Utility Services Service Provider Assets Non-Service Enabled Assets Messaging Adapters Custom APIs JDBC file:// Service Enabled Assets Service Provider / Consumer Assets

5 Service Invocation Connectivity, Adapters Task Assignment Notification Services Error handling State Persistence Security Process Analysis Metadata management Lifecycle controls Runtime & Mgmt APIs Design model APIs BPM 11g BPMN & BPEL Process Engine DEV Studios BPMN Model BPMN Compiler Process Engine BPEL Model BPEL Compiler BPMN Runtime Activity Set BPEL Runtime Activity Set Common Process Core Metadata store (MDS) Process Instance Store

6 ZENTRALE METADATENVERWALTUNG

7 MDS - Unified Metadata Management E-Business Suite MDS provides consolidated, consistent metadata management service for all AS 11 components with better/comparable performance WebCenter, OWSM, ADF, SOA SCA, Rules, Structural and/or behavioral aspect of an object / application APIs and tools for managing entire metadata lifecycle from development to deployment and patching JDeveloper WebCenter Integration Wireless ADF WLS Metadata Services (MDS) Enterprise Manager

8 ADF: Metadata Services Customization + Metadata Repository - File or DB Base Document + Site Customization User1 s User Customization Laura s Page No User Customization John s Page MDS Customization Engine A framework for building customizable applications Uses a single base application and multiple customization layers Write once customize anytime

9 SCA - THE COMPOISTE DEVELOPMENT PLATTFORM

10 SCA Composite SOA composite is a standards-based deployment unit Leverages the SCA assembly model Can mix variety of components: Mediator, BPEL, Human Workflow, etc. service properties reference S S Mediator R S BPEL R R WS R WS wire S BPEL R R WS SOA composite

11 SCA Specifications Assembly Policy Framework Implementation Languages Bindings Security Java JEE Web services RM Spring BPEL JMS Transactions C++ JCA

12 SCA Specifications (cont.) How do I define, use and administer policies for nonfunctional aspects (QoS, etc)? SCA Policy Framework Spec SOAP/ HTTP Composite How do I define, configure and assemble components to create composites? SCA Assembly Spec POJO Component RMI JCA, EJB, SOAP, How do I configure SCA services/references to use SOAP/HTTP or JMS or JCA, SCA WS Binding Spec, How do I develop SCA components in BPEL? Or in Java, SPRING? Or C++, PHP, SCA BPEL Client & Impl Spec,

13 EVENT DELIVERY NETWORK (EDN)

14 Event Delivery Network (EDN) External Event Published Publish : e1 Events defined in Event Definition Language (EDL) Java PL/SQL SCA APIs Event Dlivery Network (EDN) Re-Publish : e2.1 Component 1 with Events Component 2 with Events Subscribe: e1 Filter Publisher Component Subscriber Publish : e2 Subscribe: e2.1 Filter Publisher Component Subscriber

15 EDN Architektur

16 Event Delivery Network (EDN) publish-subscribe abstraction Developers do not need to know about underlying eventing infrastructure Fully declarative (XML) Customer portal (no filter) Retail Banking Application (no filter) Bigbank NewTransfer [ ] EDN CRM (no filter) 2 3 Customer Provisioning (US) Customer Provisioning Filter (Canada) Customer country = Provisioning US Filter (Canada) country = Canada Filter country = UK <subscribe xmlns:bb=" name="bb:newaccount > <subscribe xmlns:bb=" name="bb:newtransfer > + XPath filter: $in/tr:newtransfer/tr:address/po:count ry='us' No need for explicit wiring between components: truly decoupled applications Bigbank NewAccount [ ] country= US [ ] AUDIT (no filter) 1 <subscribenamespace namespace=" 3 level of subscription granularity: 1. Namespaces 2. Events Names 3. Content-based XPath filters Order Processing (no filter) <subscribe xmlns:bb=" name="bb:newtransfer >

17 Security Unified Security Platform End2End Identity Propagation Policy and Configuration Driven Approach Fine Grain Security Interoperable & Integrateable: JEE/SOA, Extendable Audit Capabilities

18 OPSS The Big Picture Develop Deploy Manage Oracle Fusion Middleware Components and Oracle Fusion Applications ATN, ATZ, CSF, UserRole, Policy Management, Cryptography (OSDT) Identity Assertion Cert Lookup & Val Custom SSPI Providers OPSS APIs Creds Mapping Role Mapping Audi SSO t JEE Policy & Role Depoyment Java2 & JAAS Policy Provider Oracle Virtual Directory Virtualizes Identity Store, Credential Store, Policy Store Identity Store Audit Store Policy Store Credential Store

19 Oracle Products using OPSS Product Name What It Does How It Uses OPSS Oracle ADF / WebCenter Oracle Web Services Manager (OWSM) Oracle SOA Suite Oracle Service Bus (OSB) Oracle Entitlements Service (OES) WebLogic Server (WLS) Container ADF is the framework used to develop WebCenter applications (portlets, etc.) Provides SOA and web services security Provides applications designed to deploy SOA environments (BPEL, ESB, etc.) Connects, mediates, and manages SOA composites interaction Provides externalized fine-grained authorization Java EE server / container Uses CSS for authentication and JPS for authorization (JAAS). Leverages application role, anonymous and authenticated role, policy store abstraction, policy management, credential store framework Leverages JPS for authorization, key store services, and audit Uses CSS for authentication and JPS for authorization and audit Uses CSS for authentication, identity assertion, authorization, role mapping, credentials mapping, cert. lookup, audit, SSO, SSPI framework for third-party integration Uses CSS for authentication, identity assertion, authorization, role mapping, credentials mapping, cert. lookup, audit. Uses CSS for authentication, identity assertion, authorization, role mapping, credentials mapping, cert. lookup, audit, SSO, SSPI framework for third-party integration

20 Task: Secure the Application JDeveloper IDE ADF Taskflows Enable OPSS Security Invoice Summary Create Invoice Cancel Invoice User Role Grant Roles & Policies Manage Payable Invoices Invoice Summary Authentication Form Based Authn Mike Allen Manage Payable Invoices Create Invoice Cancel Invoice Cancel Payable Invoices Invoice Summary Cancel Invoice ID Store WLS Embedded LDAP Authz Policy Store OPSS XML provider

21 OWSM Policy driven Identity Propagation wss_username_token_service_policy Verify security Authenticate Set Subject Web Client Username token OrderBooking SOA Process Receive Order wss10_saml_token_service_policy Verify SAML token Authenticate Set Subject Authorize user component_authorization_policy Get Customer Info Verify Credit Card SAML Validate Credit Card Service Fulfill Order Read Subject Insert SAML Token Notify Customer wss10_saml_token_client_policy

22 Component Architecture *except for JAX-WS Interceptor Framework Web Service Policy Reference: oracle-webservices.xml Oracle Fabric Policy Reference: composite.xml Policy Name Policy Name Policy Access Point (PAP) Policy Name Policy RMI RMI Oracle WSM Policy Manager MDS

23 ADF - APPLICATION DEVELOPMENT

24 ADF Metadata Services ADF Components Swing/JClient Mobile JSF ADF Faces View MS OFFICE ADF Controller Controller ADF Bindings ADF Data Control Model Java / Spring Classes EJB Session Beans ADF Business Components Service Object Web Services JDBC TopLink Queries EJB Finders ADF Business Components Query Object Data Access Business Services Java Classes TopLink Mapping EJB Entity Beans ADF Business Components Entity Object Persistent Business Objects

25 WebCenter The Fusion Architecture View Business Logic Data User Interface ADF Faces components Data Binding Business Services ADF Business Components Database Schema SDO Services Events Business Activity Monitoring Human Workflow Service Assign Task Task Complete Mediator /BPEL Process facts results Rules Engine Monitoring Human interaction Orchestration Policy evaluation

26 HUMAN TASK ZENTRALER POSTKORB

27 HT - Workflow Architecture Eclipse, JDeveloper Custom App Supervisor BPEL Designer Task Metadata Worklist Application Update Task Work Assignee Process Owner WSDL Contract Component Services Assign Tasks Human Workflow Service Task Management Service (Task data, forms, Attachments) Identity Service (Users, Roles) BPMN/BPEL Process Task Complete Task Routing Service (Assignment, Dispatching) User Metadata Service (Rules, work queues ) Worklist Service (Task Query, Reporting ) Notification Service ( & wireless)

28 UseCase: ADF + Human workflow Interaction (contd..) SCA composite Service endpoint (SOAP) Submit Expense UI screens (ADF Task Flow) Mediator Component (consume events) BPEL Component Process Human Workflow Component Update operations on ADF-BC objects Application module (ADF-BC) Events raised asynchronously to SOA infrastructure (Fabric) Subscribe to Events Human workflow component assigns tasks to users/roles Approve Expense UI Screens Users log on to worklist to see tasks assigned to them. Application DB (ADF Task Flow based on Human Task data control) May also include transactional data using ADF-BC data controls The worklist may be embedded as a region in other apps pages Deployed on WLS This task flow communicates with both the Human task infrastructure as well as ADF-BC to show transactional data There is an out-of-the-box worklist application to display task assigned to a user. When a user drills down into a specific task the associated ADF task flow is displayed to show the task details Deployed standalone with SOA components

29 BUSINESS RULES

30 Dynamische Prozesse durch Regeln Regelgetriebene Prozesse Regelbasierte Datenvalidierung Level 1 Process Phase 1 Phase 2 Phase 3.. Level 2 Processes for each phase 00 registration Complete Business Rules Engine und Repository acceptance Pending act Pending guide player manages flow it seamlessly tes the user from the for one Level 2 s to anotherand s the case screens to ask status Activity guide player (using human workflow) Dynamisches Service Binding Regelbasiertes Aufgaben- Management (Routing, Delegation, Eskalation)

31 Agility Through Business Rules - Entscheidungs- Dienst Rules API (JSR 94) Custom Author Rules Designer Custom Author Rules SDK Dictionary 1 Rule Set A If Then... If Then... If Then... Rule Set B Dictionary 2 Rules Repository BPEL Prozess XML Facts A C Java Facts RETE Rules Engine **/ method Foo(...) { Java Anwendung

32 Ablauf Rules Engine

33 SUMMARY

34 Scenario: SOA + ADF BC (SDO) + Flex fields ADF application to Start Employee Review Process 2. Query employee using Service interface (SDO based). Although the WSDL is defined with Employee as signature, the call may return regular Employees or Salesmen (with extra flex fields) ADF BC Service ADF Application module DB Schema includes: Employee, Dept Employee includes Emp_No, JobType, Salary, Dept_id etc 1. ADF raises event to start process. Event should only include reference Ids (say Emp No). Flex fields should ideally not be part of the event 4. Check Employee type (using new InstanceOf XPath function ) 2. Query Employee Details 3. Get recommended raise and commission 5. Declare variables of both Emp type and Salesman type. Cast/Copy the base object to the appropriate derived type interface 3. Decision Service should be based on the following facts: Input: EmpNo, Output: Raise, Commission Rules should be based on ADF- VO based facts that include the complete Employee and Salesman object (polymorphic VO). These should be queried based on the ID passed in. Commission should be returned only for Salesmen Also has Flex fields with type as discriminator. Some employees are Salesmen and have an additional Commission column ADF BC Service interface 7. Update Employee using ADF BC service interface (SDO based) 6. Approve Adjustment using human workflow The task parameters should include only references to the employee_id 6. ADF task flow application to retrieve task details should use the keys from the task parameters to retrieve the emp data using ADF-BC. ADF dynamic tables can be used to display flex attributes

35 Fragen & Antworten