Private B2B APIs between trading partners are common and must be managed. These APIs could be a part of a supply chain in manufacturing, in commerce between suppliers and retailers, or in healthcare or life sciences ecosystems.
API publishers can hide specific APIs and/or specific API features from the general public on the Developer Portal. Each API usage plan has visibility settings that allow granular configuration of APIs. For some B2B scenarios, we configure two-way SSL with mutual authentication where both the parties are known to each other. We configure additional security policies such as IP white-listing as both the provider and consumer endpoints are known to each other. Some of our clients prefer to deploy an instance of API gateway in a separate VPN-enabled network over the Internet, which is not visible to the general public. Some other clients prefer to combine partner-specific APIs with the Open API developer portal.
We also provide an extensible adapter SDK that allows creation of custom adapter for any B2B specific applications/protocols. Though the adapter for specific B2B protocol does not exist now, such as EDI, RosettaNet, etc, one time activity of adapter development as part of a project will help us re-use it across other instances where there is a need for those protocols.