Universal Containers (UC) currently owns a middleware tool and has developed an API-led integration architecture with three API tiers. The first tier interfaces directly with the systems of engagement, the second tier implements business logic and aggregates data, and while the third tier interfaces directly with the systems of record. Some of the systems of engagement will be a mobile application, a web application, and Salesforce.
UC has a business requirement to return data to the systems of engagement in different formats while also enforcing different security protocols.
What should an integration architect recommend to meet these requirements?
- Enforce separate security protocols and return formats at the second tier of the API-led architecture.
- Leverage an Identity Provider solution that communicates with the API tiers via SAML.
- Implement an API Gateway that all systems of engagement must interface with first.
- Enforce separate security protocols and return formats at the first tier of the API-led architecture.
Reveal Solution Next Question