UCLA Pilots API Portal

UCLA API portal

The University of California, Los Angeles has gone public with piloting of a fairly new developer portal specifically for APIs. The API developer portal is intended to simplify the sharing and discovery of campus application programming interfaces and web services — some 200 — while also providing a campuswide API governance program.

The use of the program maintains a consistent API experience and single "source of truth" for developers as they leverage various data sources for their applications. The outcome is that the university can create new solutions "more efficiently," explained Curtis Fornadley, program manager for enterprise integration at UCLA.

At the heart of the project is the use of Google's Apigee for API management.

According to a Google blog post, UCLA previously used "an enterprise service bus with a homegrown gateway for SOAP services." But SOAP-based services "are difficult to scale," said Fornadley. Managing them frequently means "locking them down, which clashes with our need to make data and functionality easier for developers to use."

Two development initiatives have put the API portal to the test. The first, the Ascend financial system, extends the university's financial system APIs, making them accessible to developers from various departments via secure and scalable self-service capabilities. The second, the student information system, uses APIs that give real-time access to the students' academic, financial and personal records to various UCLA applications.

Fornadley said the number of APIs — as well as the number of applications using and depending on them — increased considerably from these two projects alone, requiring better management for keeping services online, monitoring their usage and authenticating access to them.

Apigee usage has expanded from a million calls in 2020 to more than 11 million in 2021. Shortly, the transition of APIs from the home-grown gateway to the new portal will be completed, and call usage is expected to hit 49 million calls by the end of the year.

A benefit of the new portal, said Fornadley, is that usage provides the university with information that uncovers which services are being leveraged and how, which will be helpful in guiding future investments; in addition, IT considers it another route for making sure the versions of APIs used in institutional applications are protected against cybersecurity threats.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • layered glass panels and light trails

    Stanford Online Launches Immersive Learning Studio

    Stanford Online recently marked its 30th anniversary with the announcement of a new immersive learning studio, according to a university news release. The studio takes advantage of AI-powered and immersive learning technologies to continue delivering personalized and faculty-led education.

  • artificial intelligence on laptop

    OpenAI to Combine AI Products into Desktop 'Superapp'

    OpenAI is reportedly developing a desktop application that would combine several of its emerging AI products into a single platform, according to reports, marking the latest step in the company's effort to transform ChatGPT from a standalone chatbot into a broader productivity and automation environment.

  • Abstract futuristic digital network with glowing padlock icons

    Microsoft Intros New Agentic AI Security Multi-Model Defense System

    A new multi-model agentic AI security system built by Microsoft's Autonomous Code Security team helped researchers find 16 new vulnerabilities across the Windows networking and authentication stack, the company anounced in a recent security blog post.

  • Jason Palm

    AI, Identity, and Speed: Cybersecurity Priorities for Higher Ed

    Fortinet Security Operations Specialist Jason Palm explains how AI is raising new security challenges for higher education, requiring stronger governance, identity protection, threat detection, automation, and incident readiness.