The policy extension API allows you to enhance the Access Manager policy engine so that an external module can perform the following types of tasks:
Evaluate a condition and return results that Access Manager can use to determine enforcement.
Provide data from an external source that Access Manager can use to evaluate a condition or to inject into an HTTP header.
Provide actions that are performed when the policy conditions evaluate to True.
This section describes the basic characteristics of a policy extension, how to create the possible types of extensions, ands how to install and use the extension in an Access Manager policy.