OpenAM offers Java-based service interfaces to let you extend services for the requirements of your specific deployment. Following is are the steps to implement such plugins.

1. CUSTOM OAuth 2.0 scopes plugins DEFINE how OpenAM playing the role of authorization server handles scopes, including what token information to return regarding scopes set when authorization was granted.
2. Custom authentication plugins let OpenAM VALIDATE USERS against a new authentication service or an authentication service specific to the deployment
3. Post authentication, plugins perform additional processing at the end of the authentication process, but before the subject to validation. Post validation, plugins can store information about the authentication in the user's profile, or call another system for audit logging purposes.
4. Policy evaluation plugins implement new policy conditions, send attributes from the user profile as part of a policy response, extend the definition of the subjects to whom the policy applies, or customize how policy MANAGEMENT is delegated.

OpenAM offers Java-based service interfaces to let you extend services for the requirements of your specific deployment. Following is are the steps to implement such plugins.