Before you start

About this tutorial

WebSphere DataPower SOA appliances are network devices which can act as mediators between service providers and service consumers. Key advantages offered by these appliances include high performance hardware based XML and Web services message processing, protocol transformation, easy configuration and security. In this tutorial, we will demonstrate how service providers can exploit content-based message routing features in DataPower to route service requests from a tenant’s user to service endpoints dedicated to that tenant. We will also demonstrate how service providers can integrate DataPower with Tivoli Access Manager so that centrally managed authorization policies can be used to authorize tenant specific service requests. Finally, we will demonstrate how service providers can monitor service requests using Web services traffic shaping features in DataPower.

Back to top

Scenario and major implementation steps

In part 5 of this series, we described a scenario and a use case in which the service provider for the Jivaro bank multi-tenant application would like to enable multi-tenancy for his existing credit score service. In this tutorial, we will demonstrate how to configure WebSphere DataPower SOA appliance to implement a mediation pattern for multi-tenancy as illustrated in Figure 1. We will perform the following major steps:

1. Configure Web service Proxies in WebSphere DataPower for authentication, authorization and routing tenant’s requests
2. Configure tenant specific users and groups in Tivoli Access Manager
3. Setup Service Level Monitoring policies to monitor tenant specific service requests

Back to top

Prerequisites

This tutorial assumes that the following products are setup to work on an integrated platform. Detailed discussions on setting up the hardware and software components listed below are outside the scope of this article. Please refer to the Resources section for further details.

The following IBM development products are required to enable multi-tenancy for his credit check Web service solution:

1. WebSphere DataPower SOA appliance XI50
2. Tivoli Access Manager v6.0

In addition, the following software is required to deploy multiple instances of the credit check Web service:

1. WebSphere Portal Server v6.0
2. WebSphere Process Server v6.1
3. Tivoli Directory Server v6.0

1 of 8 | Next

Comments

Back to top

Table of contents

• Before you start
• Implementing the scenario
• Configure tenant specific users and groups in Tivoli Access Manager
• Setup Service Level Monitoring policies
• Conclusion
• Downloads
• Resources
• About the authors

---

1 of 8 | Next

Next steps from IBM

• Try: Tivoli Access Manager Enterprise Single Sign-on
• Demo: Demo: Tivoli Access Manager for Enterprise Single Sign-On solution overview
• Briefing: Introduction to Tivoli service management environment
• Buy: Tivoli Access Manager Enterprise Single Sign-on

Dig deeper into SOA and Web services on developerWorks

Try IBM PureSystems. No charge.

Experience today!

---

Get started with the cloud-based trial and pattern development kit.