BIOMARIN
OneTRust API GATEWAY
PROJECT OVERVIEW

The API Gateway project completes the SFDC-OneTrust integration by ensuring SFDC-side updates are not lost due to OneTrust’s rate limits.

Background - Onetrust NATIVE FEatures

  • OneTrust can push updates  to Salesforce using the SFDC API
     
  • Pushable updates can originate within OneTrust (i.e. hosted preference center) or can be sourced from other apps using the OneTrust API
     
  • OneTrust cannot pull updates from Salesforce, so custom push logic is required

BACKGROUND - SALESFORCE APEX CALLOUTS

  • SFDC can push data to HTTP services such as OneTrust using Apex callouts
     
  • OneTrust rate limits cannot keep pace with SFDC callouts
     
  • SFDC cannot automatically requeue failed callouts
     
  • Retries in Apex both complex and unreliable (guesswork)

SOLUTION - CALLOUT QUEUE = API GATEWAY

  • Use Apex callouts as first “hop” without managing retries
     
  • OneWay has internal job queue  tuned to OneTrust limits
     
  • OneWay pulls jobs off queue at set intervals
     
  • OneWay can retry if OneTrust is unavailable for any reason

API GATEWAY COMPoNENTS

runtime

JavaScript-based runtime

job queue

Job queue with JS client, rate limiting and job groups

JOB store

Embedded or remote db for job storage

3

2

1

stack TECH REQUIREMENTS

API GATEWAY COMPONENTS
 

NODEJS

Ubiquitous JavaScript-based runtime

BULLMQ

Best-in-class job queue for Node and Redis

REDIS

Ubiquitous lightweight key-value database

3

2

1

Recommended stack VENDORS

ONEway API GATEWAY FLOW

3

2

1

API GATEWAY HOSTING

Can be hosted on BioMarin’s cloud of choice. All that’s necessary is an always-on (not serverless) Node.js server and running Redis instance.

SECURITY ASPECTS

HTTP Bearer Authorization, IP-restricted access, and robust logging. No data leaves BioMarin cloud except requests sent to OneTrust.