16
Using Cloud Services for Building Next Generation Mobile Apps APIs & MBaaS: How to Extend Your Architecture for a Mobile World

APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

Embed Size (px)

Citation preview

Page 1: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

Using Cloud Servicesfor Building Next

Generation Mobile Apps

APIs amp MBaaS How to ExtendYour Architecture for a Mobile World

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 1

Coleridgersquos Ancient Mariner dying of thirst on the open ocean famously cries ldquoWater water everywhere Nor any drop to drinkrdquo Replace ldquowaterrdquo with ldquodatardquo and you have the cry of todayrsquos mobile apps Our world may be swimming in data but little of it is optimized for mobile consumption

Why Simply put the standards for middleware and backend data access that defined the web era donrsquot work for mobile The mobile world brings different types and sources of data different formats and payload sizes different transaction volumes and usage profiles and the end of connection persistence

ldquoMobilerdquo as Forrester Research observes ldquois pushing aging web architectures to the brinkrdquo1

The good news is that with the right architectural tier one that deliversmobile-optimized APIs an enterprise is positioned to make terrific innovation leapsmdashand at a pace their competitors can only envy

APIs amp MBaaS How to Extend Your Architecture for a Mobile World

1 Facemire Michael Ted Schadler and John C McCarthy Mobile Needs A Four-Tier Engagement Platform Web Architectures Canrsquot Handle the New Demands of Engagement Forrester Research Web 21 Nov 2013

appcelerator

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 2

How Mobile Broke theThree-tier World

In the days of web applications we concerned ourselves primarily with connecting to systems inside the enterprise This meant a relatively small number of backend sources all behind the firewall The original middleware solutions were designed for just this world orchestrating data from a handful of enterprise systems and rendering it to a powerful plugged-in big screen client devicemdashthe personal computer

Mobilersquos first challenge to the old web world is the expansion and diversification of data sources Any mobile app worth its salt must orchestrate data not only from private enterprise systems but also public clouds (eg Facebook Twitter) corporate SaaS systems (eg Salesforce) and increasingly even smart appliances and the like drawnfrom the Internet of Things

But the challenge doesnrsquot stop there The regular anywhereanytime access habit of mobile users increases transaction volumes through apps meaning that architectures must scale elastically Furthermore because mobile devices canrsquot count on an uninterrupted connection the apps must continue to function when offline and gracefully synchronize to the backend when the connection is restored As thefollowing table shows virtually every aspect of mobile app connectivity differs from the web

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 3

These differences are too large to be bridged by the current

three-tier standard

Mobile is pushing another tier into enterprise architectures one designed to orchestrate data for the new app types just as previous generations of middleware did for web applications

Criteria for the New Mobile Tier

There are five requirements for a good mobile architectural tier

1 ELASTIC SCALABILITY

Mobility guarantees two things

Anywhere anytime demand for data and services which changes traditional usage profiles and drives up transaction volumes

Users who are quick to issue the delete penalty to any app with performance hiccups

The first point speaks to the way mobile has changed user access patterns Data transactions are no longer chiefly a 9-to-5

WEB MOBILE

PRINCIPAL API FORMAT

NUMBER OF DATA SOURCES

DATA SOURCE LOCATION

CLIENT DEVICE PROFILE

CLIENT-TO-DATA CONNECTIVITY

USAGE PROFILE

DATA PAYLOAD

XML SOAP

Few

Behind the firewall

Powerful device with few constraints (eg power) stationary access

Steady broadband

Predictable usage hours (ie 9-to-5 8-to-10)

JSON

Many

Behind the firewall SaaS virtual private clouds public cloud

Battery- and bandwidth-constrained (by network andor fees) roaming

Intermittent amp variable speed driving need for onlineoffline syncing and rate limiting

Anywhere anytime access

Large and static optimized for PC display and feature-driven applications

Niche and orchestrated optimized for small screen and purpose-built apps

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 4

desktop-bound activity Users now expect full data access from the grocery line the airport terminal the in-laws Thanksgiving table and so on This changes usage profiles dramatically in both transaction volume and time of access

The second point goes to the new primacy of the user Mobile has put a premium on effective responsive app experiences Too much wait time and the user simply deletes the app in favor of a better one

Given these new mobile realities an architecture designed for elastic scale is critical

2 PREBUILT MOBILE-OPTIMIZED APIS

Mobilersquos emphasis on user experience makes good client design and development paramount which means developers want maximum simplicity for the server-side ldquoplumbingrdquo required to access data and pipe it in the right format to the app This is where application programming interfacesmdashAPIsmdashcome in

APIs are the lifeblood of mobility They give developers the simplified access to the data and services needed to build amazing apps In fact good mobile APIs act as a spur to innovation Think of them as Lego blocks the better and more varied the collection of blocks you make available the better and more creative the objects people build

An enterprise that makes mobile-optimized APIs widely available to developers is positioned to make terrific innovation leaps and at a pace that would never be achievable by top-down planning alone

What are examples of the kinds of APIs the new mobile tier might offer For starters there are the commonly required capabilities of most mobile apps such as the ability to manage push notifications and geo-location services or readily access a NoSQL database for on-demand storage of app data or seamlessly integrate with social media services

Beyond these core building blocks the tier would also deliver access to traditional corporate data stores such as Salesforce mySQL MS SQL and the like This access or mobile ldquoconnectorsrdquo would provide the ability first to authenticate with these stores and then perform basic functions with their data create retrieve update and delete

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 2: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 1

Coleridgersquos Ancient Mariner dying of thirst on the open ocean famously cries ldquoWater water everywhere Nor any drop to drinkrdquo Replace ldquowaterrdquo with ldquodatardquo and you have the cry of todayrsquos mobile apps Our world may be swimming in data but little of it is optimized for mobile consumption

Why Simply put the standards for middleware and backend data access that defined the web era donrsquot work for mobile The mobile world brings different types and sources of data different formats and payload sizes different transaction volumes and usage profiles and the end of connection persistence

ldquoMobilerdquo as Forrester Research observes ldquois pushing aging web architectures to the brinkrdquo1

The good news is that with the right architectural tier one that deliversmobile-optimized APIs an enterprise is positioned to make terrific innovation leapsmdashand at a pace their competitors can only envy

APIs amp MBaaS How to Extend Your Architecture for a Mobile World

1 Facemire Michael Ted Schadler and John C McCarthy Mobile Needs A Four-Tier Engagement Platform Web Architectures Canrsquot Handle the New Demands of Engagement Forrester Research Web 21 Nov 2013

appcelerator

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 2

How Mobile Broke theThree-tier World

In the days of web applications we concerned ourselves primarily with connecting to systems inside the enterprise This meant a relatively small number of backend sources all behind the firewall The original middleware solutions were designed for just this world orchestrating data from a handful of enterprise systems and rendering it to a powerful plugged-in big screen client devicemdashthe personal computer

Mobilersquos first challenge to the old web world is the expansion and diversification of data sources Any mobile app worth its salt must orchestrate data not only from private enterprise systems but also public clouds (eg Facebook Twitter) corporate SaaS systems (eg Salesforce) and increasingly even smart appliances and the like drawnfrom the Internet of Things

But the challenge doesnrsquot stop there The regular anywhereanytime access habit of mobile users increases transaction volumes through apps meaning that architectures must scale elastically Furthermore because mobile devices canrsquot count on an uninterrupted connection the apps must continue to function when offline and gracefully synchronize to the backend when the connection is restored As thefollowing table shows virtually every aspect of mobile app connectivity differs from the web

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 3

These differences are too large to be bridged by the current

three-tier standard

Mobile is pushing another tier into enterprise architectures one designed to orchestrate data for the new app types just as previous generations of middleware did for web applications

Criteria for the New Mobile Tier

There are five requirements for a good mobile architectural tier

1 ELASTIC SCALABILITY

Mobility guarantees two things

Anywhere anytime demand for data and services which changes traditional usage profiles and drives up transaction volumes

Users who are quick to issue the delete penalty to any app with performance hiccups

The first point speaks to the way mobile has changed user access patterns Data transactions are no longer chiefly a 9-to-5

WEB MOBILE

PRINCIPAL API FORMAT

NUMBER OF DATA SOURCES

DATA SOURCE LOCATION

CLIENT DEVICE PROFILE

CLIENT-TO-DATA CONNECTIVITY

USAGE PROFILE

DATA PAYLOAD

XML SOAP

Few

Behind the firewall

Powerful device with few constraints (eg power) stationary access

Steady broadband

Predictable usage hours (ie 9-to-5 8-to-10)

JSON

Many

Behind the firewall SaaS virtual private clouds public cloud

Battery- and bandwidth-constrained (by network andor fees) roaming

Intermittent amp variable speed driving need for onlineoffline syncing and rate limiting

Anywhere anytime access

Large and static optimized for PC display and feature-driven applications

Niche and orchestrated optimized for small screen and purpose-built apps

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 4

desktop-bound activity Users now expect full data access from the grocery line the airport terminal the in-laws Thanksgiving table and so on This changes usage profiles dramatically in both transaction volume and time of access

The second point goes to the new primacy of the user Mobile has put a premium on effective responsive app experiences Too much wait time and the user simply deletes the app in favor of a better one

Given these new mobile realities an architecture designed for elastic scale is critical

2 PREBUILT MOBILE-OPTIMIZED APIS

Mobilersquos emphasis on user experience makes good client design and development paramount which means developers want maximum simplicity for the server-side ldquoplumbingrdquo required to access data and pipe it in the right format to the app This is where application programming interfacesmdashAPIsmdashcome in

APIs are the lifeblood of mobility They give developers the simplified access to the data and services needed to build amazing apps In fact good mobile APIs act as a spur to innovation Think of them as Lego blocks the better and more varied the collection of blocks you make available the better and more creative the objects people build

An enterprise that makes mobile-optimized APIs widely available to developers is positioned to make terrific innovation leaps and at a pace that would never be achievable by top-down planning alone

What are examples of the kinds of APIs the new mobile tier might offer For starters there are the commonly required capabilities of most mobile apps such as the ability to manage push notifications and geo-location services or readily access a NoSQL database for on-demand storage of app data or seamlessly integrate with social media services

Beyond these core building blocks the tier would also deliver access to traditional corporate data stores such as Salesforce mySQL MS SQL and the like This access or mobile ldquoconnectorsrdquo would provide the ability first to authenticate with these stores and then perform basic functions with their data create retrieve update and delete

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 3: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 2

How Mobile Broke theThree-tier World

In the days of web applications we concerned ourselves primarily with connecting to systems inside the enterprise This meant a relatively small number of backend sources all behind the firewall The original middleware solutions were designed for just this world orchestrating data from a handful of enterprise systems and rendering it to a powerful plugged-in big screen client devicemdashthe personal computer

Mobilersquos first challenge to the old web world is the expansion and diversification of data sources Any mobile app worth its salt must orchestrate data not only from private enterprise systems but also public clouds (eg Facebook Twitter) corporate SaaS systems (eg Salesforce) and increasingly even smart appliances and the like drawnfrom the Internet of Things

But the challenge doesnrsquot stop there The regular anywhereanytime access habit of mobile users increases transaction volumes through apps meaning that architectures must scale elastically Furthermore because mobile devices canrsquot count on an uninterrupted connection the apps must continue to function when offline and gracefully synchronize to the backend when the connection is restored As thefollowing table shows virtually every aspect of mobile app connectivity differs from the web

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 3

These differences are too large to be bridged by the current

three-tier standard

Mobile is pushing another tier into enterprise architectures one designed to orchestrate data for the new app types just as previous generations of middleware did for web applications

Criteria for the New Mobile Tier

There are five requirements for a good mobile architectural tier

1 ELASTIC SCALABILITY

Mobility guarantees two things

Anywhere anytime demand for data and services which changes traditional usage profiles and drives up transaction volumes

Users who are quick to issue the delete penalty to any app with performance hiccups

The first point speaks to the way mobile has changed user access patterns Data transactions are no longer chiefly a 9-to-5

WEB MOBILE

PRINCIPAL API FORMAT

NUMBER OF DATA SOURCES

DATA SOURCE LOCATION

CLIENT DEVICE PROFILE

CLIENT-TO-DATA CONNECTIVITY

USAGE PROFILE

DATA PAYLOAD

XML SOAP

Few

Behind the firewall

Powerful device with few constraints (eg power) stationary access

Steady broadband

Predictable usage hours (ie 9-to-5 8-to-10)

JSON

Many

Behind the firewall SaaS virtual private clouds public cloud

Battery- and bandwidth-constrained (by network andor fees) roaming

Intermittent amp variable speed driving need for onlineoffline syncing and rate limiting

Anywhere anytime access

Large and static optimized for PC display and feature-driven applications

Niche and orchestrated optimized for small screen and purpose-built apps

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 4

desktop-bound activity Users now expect full data access from the grocery line the airport terminal the in-laws Thanksgiving table and so on This changes usage profiles dramatically in both transaction volume and time of access

The second point goes to the new primacy of the user Mobile has put a premium on effective responsive app experiences Too much wait time and the user simply deletes the app in favor of a better one

Given these new mobile realities an architecture designed for elastic scale is critical

2 PREBUILT MOBILE-OPTIMIZED APIS

Mobilersquos emphasis on user experience makes good client design and development paramount which means developers want maximum simplicity for the server-side ldquoplumbingrdquo required to access data and pipe it in the right format to the app This is where application programming interfacesmdashAPIsmdashcome in

APIs are the lifeblood of mobility They give developers the simplified access to the data and services needed to build amazing apps In fact good mobile APIs act as a spur to innovation Think of them as Lego blocks the better and more varied the collection of blocks you make available the better and more creative the objects people build

An enterprise that makes mobile-optimized APIs widely available to developers is positioned to make terrific innovation leaps and at a pace that would never be achievable by top-down planning alone

What are examples of the kinds of APIs the new mobile tier might offer For starters there are the commonly required capabilities of most mobile apps such as the ability to manage push notifications and geo-location services or readily access a NoSQL database for on-demand storage of app data or seamlessly integrate with social media services

Beyond these core building blocks the tier would also deliver access to traditional corporate data stores such as Salesforce mySQL MS SQL and the like This access or mobile ldquoconnectorsrdquo would provide the ability first to authenticate with these stores and then perform basic functions with their data create retrieve update and delete

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 4: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 3

These differences are too large to be bridged by the current

three-tier standard

Mobile is pushing another tier into enterprise architectures one designed to orchestrate data for the new app types just as previous generations of middleware did for web applications

Criteria for the New Mobile Tier

There are five requirements for a good mobile architectural tier

1 ELASTIC SCALABILITY

Mobility guarantees two things

Anywhere anytime demand for data and services which changes traditional usage profiles and drives up transaction volumes

Users who are quick to issue the delete penalty to any app with performance hiccups

The first point speaks to the way mobile has changed user access patterns Data transactions are no longer chiefly a 9-to-5

WEB MOBILE

PRINCIPAL API FORMAT

NUMBER OF DATA SOURCES

DATA SOURCE LOCATION

CLIENT DEVICE PROFILE

CLIENT-TO-DATA CONNECTIVITY

USAGE PROFILE

DATA PAYLOAD

XML SOAP

Few

Behind the firewall

Powerful device with few constraints (eg power) stationary access

Steady broadband

Predictable usage hours (ie 9-to-5 8-to-10)

JSON

Many

Behind the firewall SaaS virtual private clouds public cloud

Battery- and bandwidth-constrained (by network andor fees) roaming

Intermittent amp variable speed driving need for onlineoffline syncing and rate limiting

Anywhere anytime access

Large and static optimized for PC display and feature-driven applications

Niche and orchestrated optimized for small screen and purpose-built apps

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 4

desktop-bound activity Users now expect full data access from the grocery line the airport terminal the in-laws Thanksgiving table and so on This changes usage profiles dramatically in both transaction volume and time of access

The second point goes to the new primacy of the user Mobile has put a premium on effective responsive app experiences Too much wait time and the user simply deletes the app in favor of a better one

Given these new mobile realities an architecture designed for elastic scale is critical

2 PREBUILT MOBILE-OPTIMIZED APIS

Mobilersquos emphasis on user experience makes good client design and development paramount which means developers want maximum simplicity for the server-side ldquoplumbingrdquo required to access data and pipe it in the right format to the app This is where application programming interfacesmdashAPIsmdashcome in

APIs are the lifeblood of mobility They give developers the simplified access to the data and services needed to build amazing apps In fact good mobile APIs act as a spur to innovation Think of them as Lego blocks the better and more varied the collection of blocks you make available the better and more creative the objects people build

An enterprise that makes mobile-optimized APIs widely available to developers is positioned to make terrific innovation leaps and at a pace that would never be achievable by top-down planning alone

What are examples of the kinds of APIs the new mobile tier might offer For starters there are the commonly required capabilities of most mobile apps such as the ability to manage push notifications and geo-location services or readily access a NoSQL database for on-demand storage of app data or seamlessly integrate with social media services

Beyond these core building blocks the tier would also deliver access to traditional corporate data stores such as Salesforce mySQL MS SQL and the like This access or mobile ldquoconnectorsrdquo would provide the ability first to authenticate with these stores and then perform basic functions with their data create retrieve update and delete

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 5: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 4

desktop-bound activity Users now expect full data access from the grocery line the airport terminal the in-laws Thanksgiving table and so on This changes usage profiles dramatically in both transaction volume and time of access

The second point goes to the new primacy of the user Mobile has put a premium on effective responsive app experiences Too much wait time and the user simply deletes the app in favor of a better one

Given these new mobile realities an architecture designed for elastic scale is critical

2 PREBUILT MOBILE-OPTIMIZED APIS

Mobilersquos emphasis on user experience makes good client design and development paramount which means developers want maximum simplicity for the server-side ldquoplumbingrdquo required to access data and pipe it in the right format to the app This is where application programming interfacesmdashAPIsmdashcome in

APIs are the lifeblood of mobility They give developers the simplified access to the data and services needed to build amazing apps In fact good mobile APIs act as a spur to innovation Think of them as Lego blocks the better and more varied the collection of blocks you make available the better and more creative the objects people build

An enterprise that makes mobile-optimized APIs widely available to developers is positioned to make terrific innovation leaps and at a pace that would never be achievable by top-down planning alone

What are examples of the kinds of APIs the new mobile tier might offer For starters there are the commonly required capabilities of most mobile apps such as the ability to manage push notifications and geo-location services or readily access a NoSQL database for on-demand storage of app data or seamlessly integrate with social media services

Beyond these core building blocks the tier would also deliver access to traditional corporate data stores such as Salesforce mySQL MS SQL and the like This access or mobile ldquoconnectorsrdquo would provide the ability first to authenticate with these stores and then perform basic functions with their data create retrieve update and delete

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 6: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 5

3 A ROBUST CAPABILITY FOR BUILDING CUSTOM APIS

Of course not every API can be anticipated in advance So the mobile tier should also provide developers an easy way to create the ones they need An effective mechanism for building mobile APIs must include

Orchestration the ability to leverage data from multiple data sources all within a single mobile-optimized API

Optimization boiling down the data set to its essential payload size for consumption by a mobile app For instance if a traditional web API returns 20 fields the mobile variant might want only five

Transformation converting the data format from legacy styles such as XML or SOAP to a mobile-optimized format such as JSON

These API creation capabilities coupled with ready access to enterprisesystems as described above ensure developers and app teams donrsquot bog down in laborious integration work

4 OFFLINE SUPPORT

Mobile devices canrsquot count on a steady connection In the event of adisconnect the app should continue to function offline

5 SECURITY amp GOVERNANCE

Plainly this new tier must fit within the enterprisersquos standing requirements for governance and security as well as address newer mobile-specific concerns such as the treatment of data both at-rest and in-transit

Well yes and no Mobile demands a new tier just as the web did That much is clear Attempts to get around this tiermdashfor example via direct client-to-source connections or web services or MEAPsmdashall come up short (See the appendix to this whitepaper for the reasons why)

But the good news is you donrsquot have to build this tier yourself Wersquove already done it

Yoursquore Telling Me We Have to Build A Whole New Tier into Our Architecture

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 7: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 6

The Appcelerator Platform includes a true enterprise mobile backend-as-a-service (MBaaS) for a secure elastically scalable cloud-based tier to mobilize any data source public or enterprise

The Appcelerator Platformrsquos MBaaS delivers

The means to extend your enterprise architecture for the demands of mobilemdashseamlessly No disruption to current systems and no rip-and-replace

Unparalleled scalabilitymdashtoday handling more than two billion API calls per month

An entirely open and extensible framework built on Nodejs with no proprietary technologies or threat of lock-in

Flexible deployment models including a multi-tenant public cloud a dedicated virtual private cloud or an on-premises private cloud

Moreover the openness of our Platform means that its powerful MBaaS capabilities are available to every app in your portfolio regardless of whether the apps were built with the Appcelerator Platform or directly via native SDK (iOS and Android)

Fast simplified access to data via mobile-optimized APIs

THE APPCELERATOR PLATFORM

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 8: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 7

The backbone of Appceleratorrsquos MBaaS is Arrow which provides a powerful new opinionated framework for building APIs with an elastically scalable cloud service for running them With it you can quickly connect model transform and optimize data for any client whether native or web

Arrow consists of two primary components Builder and Cloud Arrow Builder enables rapid assembly of APIs data models and data connectors via either visual wizard or programmatically Arrow Cloud delivers an instant elastically scalable cloud service for running APIs and analyzing their use as well as full support for rich push notifications and ArrowDB which provides a new schema-less data store

Arrow also provides prebuilt connectors to leading data sources including Salesforce Box MS Azure MS SQL MySQL Mongo DB and Swagger

APPCELERATOR PLATFORM MBAAS

Arrow

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 9: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 8

bull Eliminate complex integrations dramatically reducing development cost and speeding app delivery

bull Remove dependency on backend system expertise for access to data

bull Improve app performance by caching data in a middle tier and orchestrating multiple data sources in a single request

bull Deliver transformative mobile experiences with ready access to enterprise and public data sources

BENEFITS

CONTINUED

Arrow Builder

Arrow builder enables quick assembly of mobile-optimized APIs

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 10: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 9

The personalized participatory and context-aware nature of mobility means that good mobile apps require a host of new kinds of services few of which were seen in the web world The Platformrsquos enterprise MBaaS includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

This includes automatically scaled data storage and capabilities such as geo- and time-based push notifications user authentication photo uploads check-ins chats status updates and more

APPCELERATOR PLATFORM MBAAS

Pre-built Mobile Services

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 11: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 10

PRE-BUILT MOBILE SERVICES

bull Create rich engaging experiences that take full advantage of mobile context and device capabilities

bull Eliminate the need for server-side programming and integration with multiple 3rd-party mobile services

BENEFITS

CONTINUED

Pre-built Mobile Services

Push notifications one of the more than 20 essential mobile services allows for the setup scheduling and sending of notifications to increase user engagement

Ratings

File Management

Reviews

Likes

Chats

Events

Friends

Messages

Push Notifications

Push Schedules

Geo Fences

Custom Objects

Client IP Location

Geo-Location

Status Updates

Posts

Check-Ins

Key Value Pair

Photo Management

Photo Collections

Email

Social Integrations

User Management

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 12: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 11

ENTERPRISE-GRADE SECURITY

The Appcelerator MBaaS is built for the security needs of the enterprise and is used across highly regulated verticals such as financial services insurance health and pharmaceuticals The MBaaS is part of the Appcelerator Platform which provides six layers of enterprise mobile security

1 Authentication and authorization oAuth LDAP Active Directory

2 Encryption for data in motion SSL in-app VPN IPsec

3 Encryption for data at rest (client) native encryption and encrypted SQLite

4 Encryption for data at rest (server) AES-256

5 App code security native source file encryption

6 Security for app distribution and management including prebuilt integrations to leading MDMMAM vendors

The Appcelerator Platform also has a full range of deployment options including private deployment for customers whose regulatory concerns donrsquot permit off-premises hosting

Most mobile discussions to-date have focused on the explosion in devices and operating systems and the challenge of building great apps for a multi-platform world Itrsquos a key challenge but not the only one As described above mobile is stressing the way traditional web architectures feed data to applications as well as their mechanisms for performance and scalemdashthe technical equivalent of a bridge collapse waiting to happen

With the Appcelerator Platform not only can you quickly build great native cross-platform apps but also mobilize any data source public or enterprise

Remember Apps Are Only the Beginning

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 13: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 12

The challenges of mobile connection have brought a rush of new (or repurposed) solution capabilities to fill the gap MEAPs API Management MBaaS new kinds of web serviceshellip But how do these things stack up against one another

There are essentially four approaches to mobilizing data

Client-to-source (direct) Connecting the app via a web services layer

Mobile Enterprise Application Platforms (MEAPs) on-premises solution for enterprise data access

API management (mobile APIs specifically) API cataloging and administration services

Mobile Backend-as-a-Service (MBaaS) mobile-specific data exposure and services We make a distinction here between ldquotraditionalrdquo MBaaSmdashwhich focus primarily on solving B2C use cases and connecting to public systemsmdashand enterprise MBaaS which include the capabilities of traditional MBaaS alongside enterprise connection and the security hardening (eg private deployment options) required by most companies

The following table summarizes the pros and cons of each

APPENDIX

Comparing the Approaches for Mobilizing Data

CLIENT-TO-SOURCE (via Web Services)

NA Mobile web apps

Content-driven apps (eg newspaper magazines music)

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Apps requiring data beyond what is exposed on the web site

Offline data access

Apps that collect data from the mobile deviceuser

Response time and performance

MEAPS Antenna (now Pegasystems)

Verivio

IBM

Kony

Connecting to enterprise data sources behind the firewall

Secure data source exposure in a consistent managed way

Alignment with existing enterprise technologyrsquos (integrated MAM web or desktop app integration etc)

Connecting to data sources that are either public or outside the enterprise firewall

Rapid availability of new device or cloud capabilities

Volume use scalability

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 14: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2015 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 13

API MANAGEMENT

ldquoTRADITIONALrdquo MBAAS

ENTERPRISE MBAAS

Apigee

Layer7 (now CA)

Mashery (now Intel)

Parse (now Facebook)

StackMob (now PayPal)

FeedHenry (now Red Hat)

Appcelerator

Managing complex catalogs of APIs for web and mobile app data usage administer internal and external developer access to APIs list and document complex APIs in a single place

Create and maintain consistent APIs schema and methods regardless of endpoint

Rapid integration of services into mobile apps storage user admin social integrations (Facebook Twitter etc)

Cost effective for specific app functions

Developer prototypes and POCs

Consumer apps that donrsquot require access to enterprise data

Elastic scalability users expect anytime access and superior performance

Flexible deployment public is not enough Security needs may warrant VPC or Private options

Turn-key APIs common APIs (eg Push Key-Value Store) + pre-built data connectors

Easy custom APIs orchestrate multiple data sources Optimize and transform payloads

APPROACH SAMPLE VENDORS GOOD FOR NOT SO GOOD FOR

Connecting to data sources that do not have pre-built APIs or a standardized method of data exposure

Services exposure storage locations users

Data transformation and orchestration for mobile

Data security

Custom services or connector development

Accessing enterprise data sources (SAP Oracle Salesforcecom etc)

Highly secure apps

Predictable costs for app support

Mission critical apps

Budget-constrained organizations

Enterprises that want to buy an off the shelf application with zero customization

Enterprises building a single app

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account

Page 15: APIs & MBaaS: How to Extend Using Cloud Services Your ... includes more than 20 out-of-the-box services needed to take full advantage of mobile and the expanding array of device features

copy 2016 APPCELERATOR INC ALL RIGHTS RESERVED APIS amp MBAAS HOW TO EXTEND YOUR ARCHITECTURE FOR A MOBILE WORLD 14

In a scorecard view these approaches match up roughly as follows

DATA REACH

EASE OF DEV

SECURITY

PERFORMANCE

SCALABILITY

ROI

WEB SERVICES MEAP API MGMT MBaaS ENTERPRISE MBaaS

HIGH MEDIUM LOW

About

Mobile apps are fast replacing web applications as the way we buy share search learn and collaborate Appceleratorreg helps companies of all sizes solve for this new reality with a mobile engagement platform to drive great mobile app experiences quickly cost-effectively and at scale The Appcelerator Platform speeds time to market with native cross-platform app development amp testing simplified access to data via mobile-optimized APIs and comprehensive real-time analytics to power user engagement and measure success With 100000+ mobile apps deployed on 300+ million devices Appceleratorrsquos solutions are backed by one of the worldrsquos largest mobile ecosystems including better than 700000 mobile developers and hundreds of ISVs and strategic partners among them Accenture Cognizant and CSC

For more information visit wwwappceleratorcom

SHARE THIS WHITEPAPER RECOMMENDED READING

Mastering The Mobile Shift Three Keys To The New Enterprise

Stop Guessing Start Measuring 5 Mobile Metrics for Great Apps

Preparing for the Flood 6 Steps to Build Apps at the Speed of Mobile

Why wait Start freeGet full trial access to the Appcelerator Platform Everything you

need to build test connect and measure great mobile apps

Sign up for a free account