Re: [Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Silmy Hasan]

Hi Ishara,

The idea was not to share the user store with SP , Within SP we will not
check whether the user is a subscriber or API Creator, we will let the user
make changes to those tables if the user is an Admin. The admin can be a
subscriber or Api Creator.

Ideally we should have this in publisher portal and store from APIM and
publish it from APIM as mentioned in the option 1, but we are thinking of
going for the second one because of the request from the APIM team as it
creates lot of complexity on their side in publishing this as a stream.

On Thu, Aug 9, 2018 at 10:31 AM, Silmy Hasan  wrote:

> Hi Dinusha,
>
> According to what is discussed with the APIM team( Fazlan and chamila) we
> will let the admins configure values for both tables, and within the SP we
> will not check whether he is an Api Creator or Subscriber.
>
>
>
> On Thu, Aug 9, 2018 at 10:16 AM, Dinusha Dissanayake 
> wrote:
>
>> Hi Silmy,
>>
>> Hi all,
>>>
>>> According to the current implementation of APIM Analytics , we use
>>> percentile values to find out certain threshold values (eg:- Abnormal
>>> request count) . Since generating alerts using percentile values creates
>>> lots of complexity to the users of the alert, it was decided to move
>>> towards a user configurable system where admins and subscribers can set
>>> those threshold values directly.
>>>
>>> *Note*
>>>
>>>- There will not be any default values for those thresholds.
>>>- The alerts will not be generated to the particualr API or
>>>application untill the admins or subscribers set a value for those
>>>thresholds.
>>>
>>> Two possible ways could be identified to let the admins and subscribers
>>> to configure these values,
>>>
>>>1.  Let the admins or subcribers set those values in APIM side and
>>>publish it to SP as a stream. A siddhi app can be written to listen to 
>>> the
>>>stream an store it in database
>>>2.  Let the admins or subscriber set a value at SP dashboard itself
>>>using a dashboard widget
>>>
>>> If we are letting subscribers to set the throshold values, the
>> subscriber has to login to SP ? If so, it would reduce the user experience
>> IMO. Can you please explain how the flow goes for subscribers when setting
>> these values?
>>
>> --
>> Dinusha Dissanayake
>> Software Engineer
>> WSO2 Inc
>> Mobile: +94712939439
>> 
>>
>> ___
>> Architecture mailing list
>> Architecture@wso2.org
>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>>
>>
>
>
> --
> Shilmy Hasan
> Associate Software Engineer | WSO2
>
> E-mail :si...@wso2.com
> Phone :0779188653
> web : http://www.wso2.com
>
> [image: https://wso2.com/signature] 
>



-- 
Shilmy Hasan
Associate Software Engineer | WSO2

E-mail :si...@wso2.com
Phone :0779188653
web : http://www.wso2.com

[image: https://wso2.com/signature] 
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Silmy Hasan]

Hi Dinusha,

According to what is discussed with the APIM team( Fazlan and chamila) we
will let the admins configure values for both tables, and within the SP we
will not check whether he is an Api Creator or Subscriber.



On Thu, Aug 9, 2018 at 10:16 AM, Dinusha Dissanayake 
wrote:

> Hi Silmy,
>
> Hi all,
>>
>> According to the current implementation of APIM Analytics , we use
>> percentile values to find out certain threshold values (eg:- Abnormal
>> request count) . Since generating alerts using percentile values creates
>> lots of complexity to the users of the alert, it was decided to move
>> towards a user configurable system where admins and subscribers can set
>> those threshold values directly.
>>
>> *Note*
>>
>>- There will not be any default values for those thresholds.
>>- The alerts will not be generated to the particualr API or
>>application untill the admins or subscribers set a value for those
>>thresholds.
>>
>> Two possible ways could be identified to let the admins and subscribers
>> to configure these values,
>>
>>1.  Let the admins or subcribers set those values in APIM side and
>>publish it to SP as a stream. A siddhi app can be written to listen to the
>>stream an store it in database
>>2.  Let the admins or subscriber set a value at SP dashboard itself
>>using a dashboard widget
>>
>> If we are letting subscribers to set the throshold values, the subscriber
> has to login to SP ? If so, it would reduce the user experience IMO. Can
> you please explain how the flow goes for subscribers when setting these
> values?
>
> --
> Dinusha Dissanayake
> Software Engineer
> WSO2 Inc
> Mobile: +94712939439
> 
>
> ___
> Architecture mailing list
> Architecture@wso2.org
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>


-- 
Shilmy Hasan
Associate Software Engineer | WSO2

E-mail :si...@wso2.com
Phone :0779188653
web : http://www.wso2.com

[image: https://wso2.com/signature] 
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Dinusha Dissanayake]

Hi Silmy,

Hi all,
>
> According to the current implementation of APIM Analytics , we use
> percentile values to find out certain threshold values (eg:- Abnormal
> request count) . Since generating alerts using percentile values creates
> lots of complexity to the users of the alert, it was decided to move
> towards a user configurable system where admins and subscribers can set
> those threshold values directly.
>
> *Note*
>
>- There will not be any default values for those thresholds.
>- The alerts will not be generated to the particualr API or
>application untill the admins or subscribers set a value for those
>thresholds.
>
> Two possible ways could be identified to let the admins and subscribers to
> configure these values,
>
>1.  Let the admins or subcribers set those values in APIM side and
>publish it to SP as a stream. A siddhi app can be written to listen to the
>stream an store it in database
>2.  Let the admins or subscriber set a value at SP dashboard itself
>using a dashboard widget
>
> If we are letting subscribers to set the throshold values, the subscriber
has to login to SP ? If so, it would reduce the user experience IMO. Can
you please explain how the flow goes for subscribers when setting these
values?

-- 
Dinusha Dissanayake
Software Engineer
WSO2 Inc
Mobile: +94712939439

___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Fazlan Nazeem]

Hi Silmy,

Few things to consider when implementing the gadgets.

1) Only users with a specific role(preferably admin) should be able to do
CRUD  on those tables. I think we can change this role using SP
configurations if a customer intends to allow users with another role to do
this task.
2) Since we are letting the user to type in the API name or Application
name, we should make sure to update the entry in case the config already
exists for the given API or Application.

We do not need to check whether the user is a subscriber. That is not a
prerequisite to configure alert thresholds.

On Wed, Aug 8, 2018 at 7:08 PM Silmy Hasan  wrote:

> Hi all,
>
> According to the current implementation of APIM Analytics , we use
> percentile values to find out certain threshold values (eg:- Abnormal
> request count) . Since generating alerts using percentile values creates
> lots of complexity to the users of the alert, it was decided to move
> towards a user configurable system where admins and subscribers can set
> those threshold values directly.
>
> *Note*
>
>- There will not be any default values for those thresholds.
>- The alerts will not be generated to the particualr API or
>application untill the admins or subscribers set a value for those
>thresholds.
>
> Two possible ways could be identified to let the admins and subscribers to
> configure these values,
>
>1.  Let the admins or subcribers set those values in APIM side and
>publish it to SP as a stream. A siddhi app can be written to listen to the
>stream an store it in database
>2.  Let the admins or subscriber set a value at SP dashboard itself
>using a dashboard widget
>
> We are thinking of moving on with the second method since the first one
> creates complexity on the APIM side.
>
> *Proposed solution*
> Creating two custom widgets in SP dashboard to enable the
> admins/subscribers perform CRUD operation on those alert configuration
> tables. There will be two tables namely ApiCreatorAlertConfiguration and
> ApiSubscriberAlertConfiguration.
>
> Please provide your suggestions.
>
> Thanks,
> Silmy
>
>
> --
> Shilmy Hasan
> Associate Software Engineer | WSO2
>
> E-mail :si...@wso2.com
> Phone :0779188653
> web : http://www.wso2.com
>
> [image: https://wso2.com/signature] 
> ___
> Architecture mailing list
> Architecture@wso2.org
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>


-- 
Thanks & Regards,

*Fazlan Nazeem*
Senior Software Engineer
WSO2 Inc
Mobile : +94772338839
fazl...@wso2.com
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Ishara Cooray]

Hi Silmy,

   1.  Let the admins or subcribers set those values in APIM side and
   publish it to SP as a stream. A siddhi app can be written to listen to the
   stream an store it in database
   2.  Let the admins or subscriber set a value at SP dashboard itself
   using a dashboard widget


If we go with option 2 we will need to share the user store with the SP
isn't it?
Is there any other usease/s where we need to share the userstore? If not I
am +1 to option 1 because that will bring all the configurations into a one
single place which is the admin app.

wdyt?

Thanks & Regards,
Ishara Cooray
Senior Software Engineer
Mobile : +9477 262 9512
WSO2, Inc. | http://wso2.com/
Lean . Enterprise . Middleware

On Wed, Aug 8, 2018 at 7:07 PM, Silmy Hasan  wrote:

> Hi all,
>
> According to the current implementation of APIM Analytics , we use
> percentile values to find out certain threshold values (eg:- Abnormal
> request count) . Since generating alerts using percentile values creates
> lots of complexity to the users of the alert, it was decided to move
> towards a user configurable system where admins and subscribers can set
> those threshold values directly.
>
> *Note*
>
>- There will not be any default values for those thresholds.
>- The alerts will not be generated to the particualr API or
>application untill the admins or subscribers set a value for those
>thresholds.
>
> Two possible ways could be identified to let the admins and subscribers to
> configure these values,
>
>1.  Let the admins or subcribers set those values in APIM side and
>publish it to SP as a stream. A siddhi app can be written to listen to the
>stream an store it in database
>2.  Let the admins or subscriber set a value at SP dashboard itself
>using a dashboard widget
>
> We are thinking of moving on with the second method since the first one
> creates complexity on the APIM side.
>
> *Proposed solution*
> Creating two custom widgets in SP dashboard to enable the
> admins/subscribers perform CRUD operation on those alert configuration
> tables. There will be two tables namely ApiCreatorAlertConfiguration and
> ApiSubscriberAlertConfiguration.
>
> Please provide your suggestions.
>
> Thanks,
> Silmy
>
>
> --
> Shilmy Hasan
> Associate Software Engineer | WSO2
>
> E-mail :si...@wso2.com
> Phone :0779188653
> web : http://www.wso2.com
>
> [image: https://wso2.com/signature] 
>
> ___
> Architecture mailing list
> Architecture@wso2.org
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

[Architecture] Moving to a user configurable model to set threshold values for APIM analytics instead of percentile values

[Silmy Hasan]

Hi all,

According to the current implementation of APIM Analytics , we use
percentile values to find out certain threshold values (eg:- Abnormal
request count) . Since generating alerts using percentile values creates
lots of complexity to the users of the alert, it was decided to move
towards a user configurable system where admins and subscribers can set
those threshold values directly.

*Note*

   - There will not be any default values for those thresholds.
   - The alerts will not be generated to the particualr API or application
   untill the admins or subscribers set a value for those thresholds.

Two possible ways could be identified to let the admins and subscribers to
configure these values,

   1.  Let the admins or subcribers set those values in APIM side and
   publish it to SP as a stream. A siddhi app can be written to listen to the
   stream an store it in database
   2.  Let the admins or subscriber set a value at SP dashboard itself
   using a dashboard widget

We are thinking of moving on with the second method since the first one
creates complexity on the APIM side.

*Proposed solution*
Creating two custom widgets in SP dashboard to enable the
admins/subscribers perform CRUD operation on those alert configuration
tables. There will be two tables namely ApiCreatorAlertConfiguration and
ApiSubscriberAlertConfiguration.

Please provide your suggestions.

Thanks,
Silmy


-- 
Shilmy Hasan
Associate Software Engineer | WSO2

E-mail :si...@wso2.com
Phone :0779188653
web : http://www.wso2.com

[image: https://wso2.com/signature] 
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

[Architecture] [IAM] Function Library for Adaptive Authentication

[Anuradha Karunarathna]

Hi all,


Currently, I am working on a project to manage function libraries in
adaptive authentication. Here is a brief summary of the project and my
progress.

Introduction:

WSO2 Identity server has a feature called script based adaptive
authentication. It provides the facility to change the authentication flow
based on conditions in JavaScript. However, at the moment each service
provider needs to have its own set of Javascript functions. Therefore, if
the identity admin needs to have the same function for several service
provider, the same JS function needs to be duplicated. As a result, the
process of managing authentication scripts gets difficult.

As a solution to this problem, it is going to introduce a set of function
libraries which can be required in authentication scripts. Under this
project, I will implement UI to add/delete/edit/import/export function
libraries, a database schema to hold text artifact libraries, a method to
include the functions from the library to authentication scripts and a
common set of functions as standard libraries.

Progress:

Currently, I am designing the required UI to manage function libraries to
WSO2 Identity Server Management Console. The designed UIs are as follows.


Function library management option is available under the manage section of
the main menu in IS Management console.


UI of adding  new function library:

It prompts for a unique function library name which will be used when
importing it in authentication scripts, a description about the function
library and an editor to write the function library.


UI of listing function libraries:

This page prompts the available list of function libraries with the edit,
delete, export functionalities.

Please provide any feedback on designs.

Thanks,

*Anuradha Karunarathna*
Intern-Software Engineering | WSO2,inc.
___
Architecture mailing list
Architecture@wso2.org
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture