By Peter Heller, Senior Director, Enterprise Architecture Marketing, Oracle
Establishing an Effective Architecture for Cloud Deployments
Challenges in integrating On-premises Systems with Public Cloud SaaS
- Integrating Data – Enterprise Architects need to understand how to move data to and from their public cloud software-as-a-service applications and their on-premises systems. They need to understand which tools to use to extract data from these systems, what technologies can be used to transfer data securely, and how to handle differences in business rules and validation constraints between the two types of systems.
- Integrating Business Processes – Enterprise Architects need to understand which business processes will extend across cloud and on-premises systems, what integration technology to use to best automate business processes across the two types of environments, and how best to test business processes when cloud SaaS offerings are upgraded.
- Integrating User Identity and Security – Enterprise Architects need to understand how best to manage user identity and access control between on-premises systems and cloud SaaS offerings to ensure that users are only allowed to access the systems that they are authorized to access. Within those cloud systems they should only be able to execute transactions and view data that they are authorized to see. These permissions should be enforced via their existing corporate security credentials such as single sign-on usernames and passwords.
- Integrating Business Intelligence – Enterprise Architects need to understand how best to blend data between cloud systems and on-premises systems to provide their lines of business with a consistent view of business intelligence across these sources.
Challenges in integrating On-premises Systems with Public Cloud IaaS and PaaS
- For test-development environments
- For departmental applications
- For business critical applications
- To store and archive data in a cost-effective manner
- For "spill-over" capacity to enable elastic scalability
- To modernize hardware infrastructure
- Moving Data – Enterprise Architects need to understand how to move data to and from their public cloud PaaS offerings and their on-premises systems. Oracle recommends using Oracle Data Pump to securely extract and transfer data, both to and from these systems. This utility is familiar to all Oracle DBAs thereby ensuring that they do not have to learn a different set of skills to use Oracle PaaS systems.
- Integrating User Identity and Security – Enterprise Architects need to understand how best to manage user identities and enforce access control constraints between on-premises systems and cloud PaaS offerings. Having a cohesive set of identity management practices will ensure that users are only allowed to access the cloud systems for which they have been authorized. Within those cloud systems they should only be able to execute transactions and view data that they are authorized to see. These permissions should be enforced via their existing corporate security credentials such as single sign-on usernames and passwords. Oracle Public Cloud PaaS is based on industry standards such as SAML2.0 and OAuth2.0 to enable users to federate identity and single-sign on between their on-premises systems and Public Cloud PaaS. Furthermore, because Oracle's on-premises and public cloud PaaS offerings are governed by a centralized identity management system, organizations can use the same directory to authorize users within both types of systems. When employees leave the company an administrator simply removes them from the on-premises directory and their rights to access public cloud assets will be revoked as well.
- Integrating Monitoring and DevOps Tools – Enterprise Architects need a unified set of monitoring tools that lets them manage on-premises systems and cloud offerings from a single pane of glass. Oracle Enterprise Manager enables this portability between on-premises and public cloud environments. In addition, Oracle's support for standards such as Openstack, Chef and Puppet allows system administrators to use popular DevOps tools, recipes, and APIs to create information systems that span on-premises and public cloud IaaS and PaaS environments. Oracle customers can learn one set of technologies and train one unified team to develop, deploy, and manage technology assets both on-premises and in Oracle Cloud.