1 Introduction

23

1.1 Trends in Digital Business

24

1.1.1 Emergence of the Intelligent Enterprise

25

1.1.2 The Experience Economy

25

1.1.3 Business Networks, Digital Ecosystems, and Collaboration

26

1.1.4 Outcome-Based Business Models

27

1.2 APIs as Digital Building Blocks

28

1.2.1 Accelerate Innovative Digital Apps

29

1.2.2 Real-Time Interactions with Business Networks

30

1.2.3 Omni-Channel Access and Single Source of Truth

31

1.2.4 Business Model Innovations and Monetization

31

1.3 Why Manage APIs?

33

1.3.1 Harmonized, Secure, and Simplified Access

33

1.3.2 Traffic Management

35

1.3.3 Governance and Reuse

36

1.3.4 Usage Analytics and Monitoring

38

1.3.5 Metering and Monetization

39

1.4 SAP API Management: A Full-Lifecycle API Management Platform

39

1.4.1 End-to-End API Lifecycle

40

1.4.2 API Lifecycle Personas

41

1.5 Related and Complementary Products

42

1.6 Summary

43

2 SAP API Management at a Glance

45

2.1 Architecture

45

2.2 Introduction to the Real-World Scenario

48

2.2.1 Retail

48

2.2.2 Food Services

49

2.2.3 Health Care

50

2.2.4 Utilities

50

2.2.5 High-Tech

51

2.2.6 Pharmaceuticals

52

2.3 Deploying and Running Your First API Proxy

52

2.3.1 Prerequisites

53

2.3.2 Set Up the Landscape and the Technical Conditions

53

2.3.3 Create the API Proxy

54

2.3.4 Manage the API Proxy with Policies

58

2.3.5 Deploy

61

2.4 Summary

62

3 Managing the End-to-End Lifecycle of APIs

63

3.1 Overview of the API Lifecycle

63

3.1.1 Design

65

3.1.2 Develop

65

3.1.3 Manage

66

3.1.4 Meter and Monetize

66

3.1.5 Engage

66

3.2 Components of SAP API Management

67

3.2.1 API Designer

67

3.2.2 API Portal

75

3.2.3 Developer Portal

95

3.2.4 API Gateway

102

3.3 Lifecycle of APIs

103

3.3.1 Create an API Provider

103

3.3.2 Create an API Proxy

106

3.3.3 Secure and Manage Your APIs

109

3.3.4 Create an API Product

113

3.3.5 Monitor and Analyze Your APIs

116

3.3.6 Meter and Monetize Your APIs

118

3.4 Summary

119

4 Developing APIs

123

4.1 API Development Methodology

123

4.2 Access the API Designer

125

4.3 API Providers

126

4.3.1 Create

127

4.3.2 Import

134

4.4 Develop New APIs

135

4.4.1 Microservices

136

4.4.2 Software Development Kit

148

4.4.3 SAP Cloud Application Programming Model

150

4.5 Add Resilience to Your APIs

150

4.6 Summary

152

5 Managing Enterprise APIs

153

5.1 Policy Editor Basics

153

5.2 Using Policies

156

5.3 Traffic Management

158

5.4 Mediation

160

5.5 Security

162

5.6 Extension

164

5.7 Summary

166

6 Traffic Management

167

6.1 Access Control

168

6.2 Concurrent Rate Limit

170

6.3 Quotas

177

6.4 Response Cache

181

6.5 Spike Arrest

184

6.6 Summary

186

7 Mediation

187

7.1 Assign Message

188

7.2 Extract Variables

195

7.3 JSON to XML

200

7.4 XML to JSON

205

7.5 Key Value Map Operations

208

7.6 Raise Fault

212

7.7 Service Callout

214

7.8 Summary

217

8 Security

219

8.1 Authentication

220

8.1.1 Verify API Key

220

8.1.2 OAuth

222

8.1.3 Basic Authentication

229

8.1.4 SAML

232

8.2 API Security Threats

241

8.2.1 XML Threat Protection

241

8.2.2 JSON Threat Protection

246

8.3 Summary

248

9 Monetizing APIs with API Products

251

9.1 Create API Products and Rate Plans

252

9.1.1 API Products

252

9.1.2 Create a Rate Plan

257

9.1.3 Subscribe to API Products

261

9.2 View Bills

263

9.3 Summary

265

10 Consuming APIs

269

10.1 Building SAP Fiori Applications with SAP Web IDE

270

10.1.1 Prerequisites

270

10.1.2 Develop Your API

271

10.1.3 Build Your Application

277

10.2 Building Native Applications with SAP Cloud Platform Mobile Services

290

10.2.1 Prerequisites

290

10.2.2 Develop Your API

291

10.2.3 Build Your Application

295

10.3 Generating Integration Flows from APIs in SAP Cloud Platform Integration

305

10.4 Summary

309

11 API Analytics

311

11.1 Analyzing API Consumption

312

11.1.1 Performance Analysis

312

11.1.2 Error Analysis

313

11.2 Developing Custom Charts

315

11.3 Statistics Collector Policy

317

11.4 Analytics on Cloud Foundry

320

11.5 Summary

323

12 API Program

327

12.1 Why an API Program?

328

12.1.1 Govern the API Sprawl

328

12.1.2 Build the Right API through Business Alignment

329

12.1.3 Developer Ecosystem Engagement

329

12.2 Best Practices for Setting Up an API Program

330

12.2.1 Develop an API Program

330

12.2.2 Use an API Platform

332

12.3 API Products and the API Product Manager

333

12.3.1 API Products

334

12.3.2 Role of the API Product Manager

335

12.4 SAP’s API Program: A Case Study

336

12.4.1 API Portfolio Management

337

12.4.2 The API Makers Community

337

12.4.3 SAP API Business Hub

338

12.4.4 Best Practices and Accelerators

338

12.5 SAP API Business Hub

339

12.5.1 API Catalog

340

12.5.2 API Sandbox

341

12.5.3 Integration Accelerators

342

12.5.4 Tools Integration for App Developers

343

12.6 Summary

344

13 Recent and Future Developments

345

13.1 Recent Innovations

345

13.1.1 Customize the Developer Portal for Developer Engagement

346

13.1.2 API Health and Advanced Analytics

347

13.1.3 Manage Third-Party APIs with Open Connectors

348

13.1.4 Custom Attributes for Dynamic Policy Enforcement

349

13.1.5 Native Support for JSON Web Tokens

350

13.2 Future Roadmap

351

13.2.1 Multicloud API Management

351

13.2.2 Support for Hybrid Deployment

352

13.2.3 Continuous Improvement in API Lifecycle Management

352

13.3 Summary

354