The policy extension API is a new feature that has been added to Access Manager 3.1. It allows you to enhance the Access Manager policy engine so that an external module can perform the following types of tasks:
Evaluate a condition and return results that Access Manager can use to determine enforcement.
Provide data from an external source that Access Manager can use to evaluate a condition or to inject into an HTTP header.
Provide actions that are performed when the policy conditions evaluate to True.
This section describes the basic characteristics of a policy extension, describes how to create the three possible types of extensions, then explains how to install and use the extension in an Access Manager policy.