4.0 The Policy Extension API

The policy extension API allows you to enhance the Access Manager policy engine so that an external module can perform the following types of tasks:

  • Evaluate a condition and return results that Access Manager can use to determine enforcement.

  • Provide data from an external source that Access Manager can use to evaluate a condition or to inject into an HTTP header.

  • Provide actions that are performed when the policy conditions evaluate to True.

This section describes the basic characteristics of a policy extension, describes how to create the three possible types of extensions, then explains how to install and use the extension in an Access Manager policy.