FINACLE SERVICES: API MANAGEMENT USING

CA API GATEWAY
Executive Summary services as APIs. As an integral part of providing full translation between a variety
API management solutions, API gateways of protocols—from legacy to REST and
Banks embarking on a digital
offer flexibility, performance and JSON—providing the bridge from legacy to
transformation in today’s connected
security. By utilizing the features offered mobile, cloud, and social. CA API Gateway
world need to thrive, compete and evolve.
by API gateway, banks can selectively can be configured to be PCI-DSS compliant,
To accelerate this transformation, Banks
expose core banking services offered and includes a built-in PKI engine, FIPS 140-
need to bring systems together, innovate,
by Finacle. CA API Gateway is one such 2 level encryption, a robust RBAC system,
provide better customer experiences and
offering, built on the foundation of SOA and SAML support..
optimize cost. To optimize cost, increase
for exposing, securing and managing
revenues and to improve customer
backend applications, network systems or Integration approach
connect, Banks can unlock value of data
infrastructure via APIs. The Finacle core banking services are
and drive innovation by exposing their
CA API Gateway can integrate with existing exposed as APIs through the Finacle
internal services to internal teams and
IAM solutions in a plug and play manner Integration platform. When banks want
external partners in a seamless and
and is the best available solution for to expose these APIs to internal and
secured manner.
enterprises looking to open up data and external teams, security validations and
API management enables Banks to access control checks needs to be taken
services to partners, developers, mobile
leverage existing IT systems and care of, in-addition to the validation of the
apps, cloud services and smart devices. CA
investments by exposing business messages. CA API Gateway helps with the
API Gateway includes protocol bridging,

Finacle and CA API management - Integration approach

CASA

Mobile banking App

Finacle Loans
integrator
PI
ful AELETE
REET SPUTT POST
I
AP

D
DMZ
TE
LE
DE

G
ful

CIF
ST
PO
ST

• Central policy enforcement on

T
PU
RE
T

outgoing/ incoming traffic

GE

• Threat protection and security

Financial institutions, • Transformations
B2B, etc. • API monitoring/ management
• API analytics
$ • ESB-like web service mediation
£
¥

External Document © 2016 EdgeVerve Systems Limited

complete API lifecycle and management,
including security, API design, publishing,
versioning, usage and performance.
If we consider the scenario of a bank
launching a new mobile app, the bank can
expose internal data assets and business
services as APIs, and then allow mobile app
developers access in order to build apps
at their own pace; a bank can expose APIs
to partners such as e-commerce websites
in order to process the online payments
with ease; or banks can potentially
outsource the data collection to third party
vendors with CA API Gateway to perform
validations and enforce security, thereby
focusing on the core aspects of its banking
operations.
Architecture diagram
Outside Partners /
Divisions
External Developers
Mobile Apps
Integration methodology & approach
• Finacle exposes several financial
and non-financial business services
through Finacle Integration platform.
These are XML based web services and
can be consumed using endpoints
such as SOAP and HTTP/S
• CA API management solution is
deployed on top of Finacle and
services are exposed to external
world in various modes such as SOAP
services or JSON/REST APIs.
• CRUD operations (create, read, update
and delete) on the data are supported
through REST APIs exposed in the CA
API Gateway.
APIs/Web Services
…
Cloud Services
• In case of requests sent by consumers,
JSON message is accepted from the
clients and JSON to Finacle XML
message format conversion happens
in the API management layer.
• In case of responses sent to
consumers, the APIM layer converts
Finacle XML message to JSON output.
Deployment options
CA API gateway deploys in a variety
of form factors - hardware appliance,
virtual appliance, software & an Amazon
machine instance; easily scales and can be
deployed in a failover environment for high
availability.
Data
Identities
Internet of Things
External Document © 2016 EdgeVerve Systems Limited
 Key benefits
• Banks can adapt this approach
without any changes to Finacle
• APIM platform provides detailed
analytics and operational metrics,
which helps in analyzing how
services are utilized, how APIs
are performing and how APIs
are being used by developers.
These metrics can provide further
insight and help in identifying
new revenue opportunities.
• Provides a foundation for
introducing new and innovative
Functional overview
Transformation Routing Traffic Control
Throttling Prioritization
API – Enable The Data And Services
Health Tracking Performance Global Staging
Workflow Patch Management Policy Migration
Manage the API Lifecycle
services by aggregating existing solution for the bank’s operations.
business services
• Adaptability to widely used forms
• Various aspects of API management like REST services and JSON message
like governance, monetization, formats can be addressed without
metering, security, etc. can be worrying about the backend systems.
well managed using the API
• Using API management solution,
management layer without
we can maintain backward
impacting the data, security and
compatibility by maintaining
availability of the underlying Finacle
multiple versions of API for each
core banking system.
service version.
• API related operations are taken care
• CA API Gateway can act as a trusted
by the CA API management solution
partner to Finacle for authenticating
and the Finacle system focusses
the incoming requests against LDAP
only on providing the banking data,
/ IAM systems.
thereby offering a clean and optimal
Composition
Authentication Entitlements API Keys Social SSO
Caching Security Token Service OAuth 1.x OAuth 2.0 OpenID Connect
Secure Access to the API
Config Migration Developer
Developer Plans API Explorer API Docs
Enrollment
Enrollment
Reporting Quotas Rankings Analytics Forums
Manage the Developer Community
External Document © 2016 EdgeVerve Systems Limited
Key Features
• Security: Passed rigorous vulnerability
tests, and integrates with popular IAM
systems with support for OAuth, SAML
and RADIUS.
• Performance and Scale: Clustered
architecture allows application level
throttling, prioritization and linear
scalability across multiple gateways
with automatic failover.
• Manageability: Handles migrations
across development, test & production
with global management tools,
integrations with enterprise BI,
analytics and reporting tools.
• Flexibility: Multiple form factors/
deployment models with support for
a wide range of platforms. Provides
protocol bridging across legacy & new
systems, and includes content-based
routing.
• Extensibility: Plug-in framework to add
new transports and identity providers,
and deep integration with enterprise
management and BI products.
About Infosys Finacle
Finacle is the industry-leading universal banking solution from EdgeVerve Systems, a wholly owned subsidiary of Infosys. The solution
helps financial institutions develop deeper connections with stakeholders, power continuous innovation and accelerate growth in the
digital world. Today, Finacle is the choice of banks across 84 countries and serves over 547 million customers – nearly 16.5 percent of
the world’s adult banked population.

Finacle solutions address the core banking, e-banking, mobile banking, CRM, payments, treasury, origination, liquidity management,
Islamic banking, wealth management, and analytics needs of financial institutions worldwide. Assessment of the top 1000 world banks
reveals that banks powered by Finacle enjoy 50 percent higher returns on assets, 30 percent higher returns on capital, and 8.1 percent
points lesser costs to income than others.

About CA
CA Technologies (NASDAQ: CA) creates software that fuels transformation for companies and enables them to seize the opportunities of
the application economy. Software is at the heart of every business, in every industry. From planning to development to management
and security, CA is working with companies worldwide to change the way we live, transact and communicate.

CA software and solutions help our customers drive enterprise-wide productivity, offer differentiated user experiences and open new
growth opportunities. And we are able to deliver this value across multiple environments—mobile, private and public cloud, distributed
and mainframe. Our goal is to be recognized by our customers as their critical partner in the new application economy. CA Technologies
has been recognized as a value leader by industry analysts and has been hailed as one of the “World’s 100 Most Innovative Companies”
by Forbes, as well as one of the greenest companies in the United States by Newsweek®.

For more information, contact finacle@edgeverve.com www.finacle.com

©2016 EdgeVerve Systems Limited, a wholly owned subsidiary of Infosys, Bangalore, India. All Rights Reserved. This documentation is the sole property of EdgeVerve Systems Limited (“EdgeVerve”).
EdgeVerve believes the information in this document or page is accurate as of its publication date; such information is subject to change without notice. EdgeVerve acknowledges the proprietary rights
of other companies to the trademarks, product names and such other intellectual property rights mentioned in this document. This document is not for general distribution and is meant for use solely
by the person or entity that it has been specifically issued to and can be used for the sole purpose it is intended to be used for as communicated by EdgeVerve in writing. Except as expressly permitted
by EdgeVerve in writing, neither this documentation nor any part of it may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, printing,
photocopying, recording or otherwise, without the prior written permission of EdgeVerve and/ or any named intellectual property rights holders under this document.